Skip to content
OpenAdvisories

Vendor

attr project

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.1

    attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

    attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attacke…