CVE-2016-20015

{"id": "CVE-2016-20015", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.6}]}, "published": "2022-09-20T18:15:09.897", "references": [{"url": "https://bugs.gentoo.org/602652", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges. There is a race condition involving /var/lib/smokeping and chown."}, {"lang": "es", "value": "En el paquete ebuild versiones hasta smokeping-2.7.3-r1 para SmokePing en Gentoo, el initscript permite al usuario smokeping obtener la propiedad de cualquier archivo, permitiendo al usuario smokeping conseguir privilegios de root. Se presenta una condici\u00f3n de carrera que involucra a /var/lib/smokeping y chown"}], "lastModified": "2022-09-22T00:19:34.010", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:smokeping:smokeping:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6E41EEC-A9B0-4852-9452-EEA3F55A2D71", "versionEndIncluding": "2.7.3-r1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}