← Back

CVE-2015-1378

nvd nist
Published: Aug 7, 2017Modified: May 13, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

cmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is sourced without checking that the local directory is writable by non-root users.

Affected (10)

Grml
1 product
Grml Debootstrap
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Grml
Grml Debootstrap
Version 0.54
Grml Debootstrap
Version 0.68
Grml Debootstrap
Version 0.70
Grml Debootstrap
Version 0.71
Grml Debootstrap
Version 0.72
Grml Debootstrap
Version 0.73
Grml Debootstrap
Version 0.74
Grml Debootstrap
Version 0.75
Grml Debootstrap
Version 0.76
Grml Debootstrap
Version 0.77

Related CWEs

CWE-264
CWE-264

References (10)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Issue TrackingThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.