Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open, and sys_mknod inside jails, which could allow local users to gain elevated privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RSBAC 安全漏洞
Vulnerability Description
RSBAC存在安全漏洞。RSBAC的Jail进程不正确允许文件以SUID和SGID属性建立，本地攻击者可以利用这个漏洞在Jail环境中提升权限。在Jail环境下，攻击者可以利用程序使用sys_creat， sys_open和sys_mknod函数建立suid和sgid文件，这可导致攻击者提升权限，然后对系统进行进一步攻击。
CVSS Information
N/A
Vulnerability Type
N/A