LWN.net Logo

Not logged in

Log in now

Create an account

Subscribe to LWN

Recent Features

LWN.net Weekly Edition for May 23, 2013

An "enum" for Python 3

An unexpected perf feature

LWN.net Weekly Edition for May 16, 2013

A look at the PyPy 2.0 release

Printable page
Weekly edition Kernel Security Distributions Contact Us Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ Sponsors

libcap: unauthorized directory access

Package(s):libcap CVE #(s):CVE-2011-4099
Created:November 18, 2011 Updated:December 12, 2011
Description: From the openSUSE advisory:

capsh did not chdir("/") after callling chroot(). Programs could therefore access the current directory outside of the chroot

Alerts:
Mandriva MDVSA-2011:185 2011-12-12
Scientific Linux SL-libc-20111206 2011-12-06
Red Hat RHSA-2011:1694-03 2011-12-06
openSUSE openSUSE-SU-2011:1259-1 2011-11-18
(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds