Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

initscripts: privilege escalation

Package(s):

initscripts

CVE #(s):

CVE-2005-3629

Created:

March 7, 2006

Updated:

March 15, 2006

Description:

A bug was found in the way initscripts handled various environment variables when the /sbin/service command is run. It is possible for a local user with permissions to execute /sbin/service via sudo to execute arbitrary commands as the 'root' user.

Alerts:

Red Hat	RHSA-2006:0015-01	2006-03-15
Red Hat	RHSA-2006:0016-01	2006-03-07

(Log in to post comments)