Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account, because this directory is writable in between a call to emake and a call to fowners.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Gentoo Portage 安全漏洞
Vulnerability Description
Gentoo是Gentoo基金会的一套开源的Linux系统。Gentoo Portage是其中的一个软件包管理器。 Gentoo Portage 2.3.84及之前版本中存在安全漏洞，该漏洞源于在对emake调用和fowners对调用之间，/usr/lib64/nagios/plugins目录可以被执行写入操作。本地攻击者可利用该漏洞向该目录中注入恶意插件。
CVSS Information
N/A
Vulnerability Type
N/A