Vendor
ncopa
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 7.8
su-exec through 0.3 Privilege Escalation via Numeric User ID
su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identif…