CVE-2004-2778 Privilege escalation in n/a

What is CVE-2004-2778?

CVE-2004-2778 is a high-severity vulnerability in n/a, published on 27 Jun 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted commands via navigating to the affected directories, or executing the affected commands.

Weakness: CWE-264

Which versions are affected by CVE-2004-2778?

It affects 1 product.

Products include Gentoo Portage.

How do I fix CVE-2004-2778?

No fix has been published for CVE-2004-2778 yet. Limit exposure of the affected software until one is available.

Is CVE-2004-2778 being exploited?

There is no known exploitation of CVE-2004-2778 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2016-20021 Gentoo Portage missing PGP validation of executed code Critical 9.8
• CVE-2013-2100 Gentoo Portage does not verify X.509 certificates from SSL servers Critical 9.3
• CVE-2008-4394 Path traversal in n/a Medium 6.9
• CVE-2019-20384 Race condition in n/a Medium 5.5
• CVE-2007-6249 Information disclosure in n/a Low 2.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-j8qf-3qcm-gp2f.