Published: 28/01/2021 Updated: 26/04/2022

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

A security issue has been found in OpenDoas prior to 6.8.1, where rules that allowed the user to execute any command would inherit the executing user's PATH instead of resetting it to a default PATH. Rules that limit the user to execute only a specific command are not affected by this and are only executed from the default PATH and with the PATH environment variable set to the safe default.

Vulnerable Product	Search on Vulmon	Subscribe to Product
opendoas project opendoas

A security issue has been found in OpenDoas before 681, where rules that allowed the user to execute any command would inherit the executing user's PATH instead of resetting it to a default PATH Rules that limit the user to execute only a specific command are not affected by this and are only executed from the default PATH and with the PATH envi ...

CWE-459 CWE-909 https://github.com/Duncaen/OpenDoas/commit/01c658f8c45cb92a343be5f32aa6da70b2032168 https://github.com/Duncaen/OpenDoas/issues/45 https://github.com/Duncaen/OpenDoas/releases/tag/v6.8.1 https://github.com/Duncaen/OpenDoas/commit/d5acd52e2a15c36a8e06f9103d35622933aa422d https://security.gentoo.org/glsa/202107-11 https://nvd.nist.gov https://security.archlinux.org/CVE-2019-25016

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-25016

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect