Vulnerabilities > CVE-2008-3278 - Insecure Default Initialization of Resource vulnerability in Redhat Frysk 20080805

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
redhat
CWE-1188
NVD
Published: 2019-11-07
Updated: 2024-11-21

Summary

frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability by running arbitrary code as another user.

Vulnerable Configurations

Part Description Count
Application
Redhat
2
OS
Redhat
1

Common Weakness Enumeration (CWE)

References