QwikSec

Security Database

CVE

CWE

Training

CVE-2008-3278

Published: Nov 7, 2019

Modified: Aug 7, 2024

PUBLISHED

Description

frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability by running arbitrary code as another user.

Vendor	Product	Versions
frysk	frysk	affected `through 2008-08-05`

References

https://security-tracker.debian.org/tracker/CVE-2008-3278

x_refsource_MISC

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3278

x_refsource_MISC

https://access.redhat.com/security/cve/cve-2008-3278

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.