CVE Database
/

CVE-2004-0564

Back to search

CVE-2004-0564

Published: Nov 19, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "is NOT designed to run setuid-root." Therefore this identifier applies *only* to those configurations and installations under which pppoe is run setuid root despite the developer's warnings.

VendorProductVersions

n/a

n/a

affected
n/a

References

11315
vdb-entry
x_refsource_BID
pppoe-file-overwrite(17576)
vdb-entry
x_refsource_XF
DSA-557
vendor-advisory
x_refsource_DEBIAN
FLSA:152794
vendor-advisory
x_refsource_FEDORA
MDKSA-2004:145
vendor-advisory
x_refsource_MANDRAKE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now