Description
kdocker.cpp in kdocker 0.1 through 0.8 does not properly check the ownership of files, which could allow local users to execute arbitrary programs.
References
- kdocker-kdockerccp-gain-privileges(17718) vdb-entry
- 10729 vdb-entry
- 1011688 vdb-entry
- http://cvs.sourceforge.net/viewcvs.py/kdocker/kdocker/src/kdocker.cpp?r1=1.10&r2=1.11&sortby=log
- http://sourceforge.net/forum/forum.php?forum_id=414631
- 11419 vdb-entry
- 12828 third-party-advisory