CVE-2017-16933
published 2017-11-24CVE-2017-16933: etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain…
PriorityP430high7CVSS 3.0
AVLACHPRLUINSUCHIHAH
EPSS
0.30%
22.1th percentile
etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | icinga2 | < icinga2 2.8.4-1 (bookworm) | icinga2 2.8.4-1 (bookworm) |
| icinga | icinga | 2.0.0 – 2.8.0 | — |
| icinga | icinga | 2.0.0 – 2.8.1 | — |
| icinga | icinga2 | >= 0 < 2.8.4-1 | 2.8.4-1 |
| icinga | icinga2 | >= 0 < 2.8.4-1 | 2.8.4-1 |
| icinga | icinga2 | >= 0 < 2.8.4-1 | 2.8.4-1 |
| icinga | icinga2 | >= 0 < 2.8.4-1 | 2.8.4-1 |
CVSS provenance
nvdv3.07.0HIGHCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
osv7.0HIGH
vendor_debian7.0LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5f3g-f3qg-cgq4: An issue was discovered in Icinga 2
ghsa_unreviewed·2022-05-13·CVSS 7.0
CVE-2018-6533 [HIGH] GHSA-5f3g-f3qg-cgq4: An issue was discovered in Icinga 2
An issue was discovered in Icinga 2.x through 2.8.1. By editing the init.conf file, Icinga 2 can be run as root. Following this the program can be used to run arbitrary code as root. This was fixed by no longer using init.conf to determine account information for any root-executed code (a larger issue than CVE-2017-16933).
GHSA
GHSA-v3ww-m662-2527: etc/initsystem/prepare-dirs in Icinga 2
ghsa_unreviewed·2022-05-13
CVE-2017-16933 [HIGH] CWE-732 GHSA-v3ww-m662-2527: etc/initsystem/prepare-dirs in Icinga 2
etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link.
OSV
CVE-2018-6533: An issue was discovered in Icinga 2
osv·2018-02-27·CVSS 7.0
CVE-2018-6533 [HIGH] CVE-2018-6533: An issue was discovered in Icinga 2
An issue was discovered in Icinga 2.x through 2.8.1. By editing the init.conf file, Icinga 2 can be run as root. Following this the program can be used to run arbitrary code as root. This was fixed by no longer using init.conf to determine account information for any root-executed code (a larger issue than CVE-2017-16933).
OSV
CVE-2017-16933: etc/initsystem/prepare-dirs in Icinga 2
osv·2017-11-24·CVSS 7.0
CVE-2017-16933 [HIGH] CVE-2017-16933: etc/initsystem/prepare-dirs in Icinga 2
etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link.
Debian
CVE-2018-6533: icinga2 - An issue was discovered in Icinga 2.x through 2.8.1. By editing the init.conf fi...
vendor_debian·2018·CVSS 7.0
CVE-2018-6533 [HIGH] CVE-2018-6533: icinga2 - An issue was discovered in Icinga 2.x through 2.8.1. By editing the init.conf fi...
An issue was discovered in Icinga 2.x through 2.8.1. By editing the init.conf file, Icinga 2 can be run as root. Following this the program can be used to run arbitrary code as root. This was fixed by no longer using init.conf to determine account information for any root-executed code (a larger issue than CVE-2017-16933).
Scope: local
bookworm: resolved (fixed in 2.8.4-1)
bullseye: resolved (fixed in 2.8.4-1)
forky: resolved (fixed in 2.8.4-1)
sid: resolved (fixed in 2.8.4-1)
trixie: resolved (fixed in 2.8.4-1)
Debian
CVE-2017-16933: icinga2 - etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a f...
vendor_debian·2017·CVSS 7.0
CVE-2017-16933 [HIGH] CVE-2017-16933: icinga2 - etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a f...
etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link.
Scope: local
bookworm: resolved (fixed in 2.8.4-1)
bullseye: resolved (fixed in 2.8.4-1)
forky: resolved (fixed in 2.8.4-1)
sid: resolved (fixed in 2.8.4-1)
trixie: resolved (fixed in 2.8.4-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-11-24
Published