CPE Details
Squid Analysis Report Generator Project Squid Analysis Report Generator (sarg) 2.3.7
2.3.7
2020-01-28
12h07 +00:00
12h07 +00:00
2020-01-28
12h07 +00:00
12h07 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:squid_analysis_report_generator_project:squid_analysis_report_generator:2.3.7:*:*:*:*:*:*:*
Informations
Vendor
squid_analysis_report_generator_projectProduct
squid_analysis_report_generatorVersion
2.3.7Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| log.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation. By default, it uses a fixed temporary directory /tmp/sarg. As the root user, sarg creates this directory or reuses an existing one in an insecure manner. An attacker can pre-create the directory, and place symlinks in it (after winning a /tmp/sarg/denied.int_unsort race condition). The outcome will be corrupted or newly created files in privileged file system locations. | 7 |
High |
