Skip to content
OpenAdvisories

Vendor

ncopa

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.8

    su-exec through 0.3 Privilege Escalation via Numeric User ID

    su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identif…