CVE-2008-3278 Privilege escalation in frysk
Local attackers can execute arbitrary code as another user due to insecure RPATH settings in frysk binaries shipped with Red Hat Enterprise Linux 5.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2008-3278?
CVE-2008-3278 is a high-severity vulnerability in frysk, published on 7 Nov 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability by running arbitrary code as another user.
Weakness: CWE-1188
Which versions are affected by CVE-2008-3278?
It affects 1 product.
Products include Redhat Frysk.
How do I fix CVE-2008-3278?
No fix has been published for CVE-2008-3278 yet. Limit exposure of the affected software until one is available.
Is CVE-2008-3278 being exploited?
There is no known exploitation of CVE-2008-3278 in the wild and no public exploit code.
Sources
Also known as GHSA-m6wp-c7g9-jv26.