Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (with control of the non-root-owned directory /etc/quagga) to escalate their privileges to root upon package installation or update.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Quagga 后置链接漏洞
Vulnerability Description
Quagga是美国Kunihiro Ishiguro个人开发者的一款路由软件套件。该套件可在多种平台上实现OSPFv2、OSPFv3、RIP v1/v2等协议，并提供路由重分布、路由映射等功能。 Quagga 存在后置链接漏洞，该漏洞源于在1.2.4的Quagga中发现了一个问题，在建议的规范文件中不安全的chown chmod操作允许用户(控制非根用户拥有的目录等quagga)在包安装或更新时将其权限升级到根用户。
CVSS Information
N/A
Vulnerability Type
N/A