CVE-2014-9091

Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.
Configurations

Configuration 1 (hide)

cpe:2.3:a:icecast:icecast:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:20

Type Values Removed Values Added
References () http://icecast.org/news/icecast-release-2_4_0/ - Vendor Advisory () http://icecast.org/news/icecast-release-2_4_0/ - Vendor Advisory
References () http://lists.opensuse.org/opensuse-updates/2014-12/msg00037.html - () http://lists.opensuse.org/opensuse-updates/2014-12/msg00037.html -
References () http://seclists.org/oss-sec/2014/q4/794 - () http://seclists.org/oss-sec/2014/q4/794 -
References () http://seclists.org/oss-sec/2014/q4/802 - () http://seclists.org/oss-sec/2014/q4/802 -
References () https://bugzilla.redhat.com/show_bug.cgi?id=1168146 - () https://bugzilla.redhat.com/show_bug.cgi?id=1168146 -
References () https://trac.xiph.org/changeset/19137/ - Exploit () https://trac.xiph.org/changeset/19137/ - Exploit

Information

Published : 2014-12-10 15:59

Updated : 2024-11-21 02:20


NVD link : CVE-2014-9091

Mitre link : CVE-2014-9091

CVE.ORG link : CVE-2014-9091


JSON object : View

Products Affected

icecast

  • icecast
CWE
CWE-264

Permissions, Privileges, and Access Controls