Local File Ownership Manipulation in GNU Coreutils
CVE-2017-18018

4.7MEDIUM

Key Information:

Vendor
Gnu
Status
Coreutils
Vendor
CVE Published:
4 January 2018

Summary

In GNU Coreutils versions up to 8.29, a flaw exists in the handling of ownership changes through the commands chown and chgrp. When using the POSIX options '-R -L', the application fails to adequately prevent the replacement of a regular file with a symlink. This vulnerability enables local users to exploit a race condition, potentially allowing them to modify the ownership of arbitrary files. This could lead to unauthorized access and manipulation of system files.

References

http://lists.gnu.org/archive/html/coreutils/2017-12/msg00...
x_refsource_MISC

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.