CVE-2011-5275 The install script in Domain Technologie Control (DTC) before 0.34.1 gives sudo permissions for chrootuid to the dtc user, which makes it easier for context-dependent users to gain privileges.
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The install script in Domain Technologie Control (DTC) before 0.34.1 gives sudo permissions for chrootuid to the dtc user, which makes it easier for context-dependent users to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gplhost domain technologie control | <= 0.32.11 | No fix listed |
| gplhost domain technologie control | = 0.24.6 | No fix listed |
| gplhost domain technologie control | = 0.25.1 | No fix listed |
| gplhost domain technologie control | = 0.25.2 | No fix listed |
| gplhost domain technologie control | = 0.25.3 | No fix listed |
| gplhost domain technologie control | = 0.26.7 | No fix listed |
| gplhost domain technologie control | = 0.26.8 | No fix listed |
| gplhost domain technologie control | = 0.26.9 | No fix listed |
| gplhost domain technologie control | = 0.27.3 | No fix listed |
| gplhost domain technologie control | = 0.28.2 | No fix listed |
| gplhost domain technologie control | = 0.28.3 | No fix listed |
| gplhost domain technologie control | = 0.28.4 | No fix listed |
| gplhost domain technologie control | = 0.28.6 | No fix listed |
| gplhost domain technologie control | = 0.28.9 | No fix listed |
| gplhost domain technologie control | = 0.28.10 | No fix listed |
| gplhost domain technologie control | = 0.29.1 | No fix listed |
| gplhost domain technologie control | = 0.29.6 | No fix listed |
| gplhost domain technologie control | = 0.29.8 | No fix listed |
| gplhost domain technologie control | = 0.29.10 | No fix listed |
| gplhost domain technologie control | = 0.29.14 | No fix listed |
| gplhost domain technologie control | = 0.29.15 | No fix listed |
| gplhost domain technologie control | = 0.29.16 | No fix listed |
| gplhost domain technologie control | = 0.29.17 | No fix listed |
| gplhost domain technologie control | = 0.30.6 | No fix listed |
| gplhost domain technologie control | = 0.30.8 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| gplhost domain technologie control | = 0.30.10 | No fix listed |
| gplhost domain technologie control | = 0.30.18 | No fix listed |
| gplhost domain technologie control | = 0.30.20 | No fix listed |
| gplhost domain technologie control | = 0.32.1 | No fix listed |
| gplhost domain technologie control | = 0.32.2 | No fix listed |
| gplhost domain technologie control | = 0.32.3 | No fix listed |
| gplhost domain technologie control | = 0.32.4 | No fix listed |
| gplhost domain technologie control | = 0.32.5 | No fix listed |
| gplhost domain technologie control | = 0.32.6 | No fix listed |
| gplhost domain technologie control | = 0.32.7 | No fix listed |
References
- git.gplhost.com
- DSA-2365 vendor-advisory
- bugs.debian.org