Description
Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system.
References
- 4130 vdb-entry
- 20020219 Security BugWare : Alcatel 4400 PBX hack mailing-list
Published May 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre
Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system.