CVE-2015-0926

Published: Feb 1, 2015Modified: May 6, 2026

6.8

Vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 3.1 / Impact: 10.0

Source: NVD

Description

Labtech before 100.237 on Linux uses world-writable permissions for root-executed scripts, which allows local users to gain privileges by modifying a script file.

Affected (1)

Products: Labtech Software: Labtech

Labtech Software

1 product

Labtech

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Labtech Software Labtech	Up to 55.170

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

http://www.kb.cert.org/vuls/id/637068

Source: cret@cert.org

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/637068

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.