Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2017-18018
Description:In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.
Test IDs: 1.3.6.1.4.1.25623.1.0.874077   1.3.6.1.4.1.25623.1.1.2.2020.1484   1.3.6.1.4.1.25623.1.1.2.2020.1194   1.3.6.1.4.1.25623.1.1.2.2019.2563   1.3.6.1.4.1.25623.1.1.2.2019.2134   1.3.6.1.4.1.25623.1.1.2.2019.2417   1.3.6.1.4.1.25623.1.1.2.2019.2333  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-18018
http://lists.gnu.org/archive/html/coreutils/2017-12/msg00045.html




© 1998-2025 E-Soft Inc. All rights reserved.