CVE-2007-0557 rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow attackers to gain privileges via a crafted recipe file, a different vulnerability tha...
HighCVSS 7.2
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow attackers to gain privileges via a crafted recipe file, a different vulnerability than CVE-2007-0536.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rmake | = 1.0.3 | No fix listed |
References
- 32971 vdb-entry
- issues.rpath.com vendor-advisory