Local Privilege Escalation in policycoreutils by seunshare
CVE-2014-3215

Currently unrated

Key Information:

Vendor: Selinuxproject
Status: Policycoreutils
Vendor: CVE Published:; 8 May 2014

🔔 Create Selinuxproject Vulnerability Alert

What is CVE-2014-3215?

The seunshare utility in policycoreutils prior to version 2.2.5 is configured with excessive permissions allowing local users to exploit it. By leveraging this misconfiguration, a local user could manipulate the execution environment, thus escalating privileges without adequate authorization. This vulnerability highlights the need for stringent permission settings and proper role management to protect sensitive operations from unauthorized access.

References

http://www.securityfocus.com/bid/67341

vdb-entryx_refsource_BID

http://lists.opensuse.org/opensuse-updates/2014-06/msg000...

vendor-advisoryx_refsource_SUSE

http://openwall.com/lists/oss-security/2014/05/08/1

mailing-listx_refsource_MLIST

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 8, 2014
Vulnerability Reserved
May 3, 2014

CVE-2014-3215 Data

JSON