GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary user control the activities of the process.
Advisories
Source ID Title
Debian DLA Debian DLA DLA-3611-1 inetutils security update
Ubuntu USN Ubuntu USN USN-6304-1 Inetutils vulnerabilities
Ubuntu USN Ubuntu USN USN-7781-1 Inetutils vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-02T18:31:53.432Z

Reserved: 2023-08-14T00:00:00

Link: CVE-2023-40303

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-08-14T05:15:10.233

Modified: 2024-11-21T08:19:11.747

Link: CVE-2023-40303

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.