CVE-2016-5759 The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
HighCVSS 7.8
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell suse linux enterprise desktop | = 12.0-sp1 | No fix listed |
| novell suse linux enterprise server | = 12.0-sp1 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
References
- openSUSE-SU-2016:2605 vendor-advisory
- [sle-security-updates] 20161017 SUSE-SU-2016:2553-1: moderate: Security update for kdump mailing-list