CVE-2015-1378

cmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is sourced without checking that the local directory is writable by non-root users.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-08-07

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Grml-debootstrap (Grml)

References

• http://cve.killedkenny.io/cve/CVE-2015-1378
• http://www.openwall.com/lists/oss-security/2015/01/27/17
• https://github.com/grml/grml-debootstrap/issues/59
• https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1378.html
• https://security-tracker.debian.org/tracker/CVE-2015-1378/