OSVDB ID: 11925

Title: ChessBrain Insecure File Ownership Local Privilege Escalation

Info

Disclosure

Nov 17, 2004

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

ChessBrain contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is due to improper file ownership allowing user-owned files to be run with root privileges by init script. By installing the ChessBrain, a local attacker can gain root privileges, resulting in a loss of integrity.

Classification

Location: Local Access Required
Attack Type: Other
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Upgrade to version 20407-r1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Gentoo Foundation, Inc.

ChessBrain

20407

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/36218