Description
The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device number as /dev/port, which might allow local users to gain root privileges.
References
- https://issues.rpath.com/browse/RMK-634
- 25899 vdb-entry
- 27030 third-party-advisory
- https://bugs.gentoo.org/show_bug.cgi?id=194550
- 20071002 rPSA-2007-0203-1 rmake rmake-proxy rmake-repos mailing-list