CVE-2007-0536

The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges.

🔗 References (10)

• cve@mitrehttp://lists.rpath.com/pipermail/security-announce/2007-January/000137.html
• cve@mitrehttp://osvdb.org/32972
• cve@mitrehttp://secunia.com/advisories/23922
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/31942
• cve@mitrehttps://issues.rpath.com/browse/RPL-987
• af854a3a-2127-422b-91ae-364da2661108http://lists.rpath.com/pipermail/security-announce/2007-January/000137.html
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/32972
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/23922
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/31942
• af854a3a-2127-422b-91ae-364da2661108https://issues.rpath.com/browse/RPL-987