Description
initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to gain root privileges via unknown vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | initscripts | 7.93.24.EL-1.1 | RHSA-2006:0016 |
| RHEL 3 | initscripts | 7.31.30.EL-1 | RHSA-2006:0015 |
Advisories 2
- RHSA-2006:0016 Red Hat Security Advisory: initscripts security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2006:0015 Red Hat Security Advisory: initscripts security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 19162 third-party-advisory
- initscripts-service-gain-privileges(25374) vdb-entry
- 19532 third-party-advisory
- RHSA-2006:0016 vendor-advisory
- oval:org.mitre.oval:def:11198 vdb-entry signature
- 1015732 vdb-entry
- 17038 vdb-entry
- RHSA-2006:0015 vendor-advisory