CVE-2001-0787 LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges.
MediumCVSS 4.6
EPSS 0.72%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat linux | = 7.0 | No fix listed |
| redhat linux | = 7.1 | No fix listed |
References
- L-096 government-resource third-party-advisory
- RHSA-2001:077 vendor-advisory
- 2865 vdb-entry
- lprng-supplementary-groups(6703) vdb-entry