CVE-2015-2285 The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubuntu Vivid 15.04, allows local users to execute arbitrary commands and gain privileg...
HighCVSS 7.2
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubuntu Vivid 15.04, allows local users to execute arbitrary commands and gain privileges via a crafted file in /run/user/*/upstart/sessions/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu upstart | <= 1.13.2-0ubuntu7 | No fix listed |
| ubuntu vivid | = 15.04 | No fix listed |
References
- packetstormsecurity.com exploit
- 20150302 upstart logrotate privilege escalation in Ubuntu Vivid (development) exploit mailing-list
- www.halfdog.net exploit
- bugs.launchpad.net exploit vendor-advisory