Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, related to requirements for directory ownership.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH 'ChrootDirectory'选项本地特权提升漏洞
Vulnerability Description
当在Red Hat Enterprise Linux (RHEL) 5.4和Fedora 11的OpenSSH 4.3中的sshd使用时，对OpenSSH 4.8中的ChrootDirectory特性的特定Red Hat修改允许本地用户借助对setuid程序的hard链接，获得特权。setuid程序在chroot目录范围内使用配置文件。该漏洞与对目录所有权的要求有关。
CVSS Information
N/A
Vulnerability Type
N/A