ByteOS Network

NVD Vulnerability Details :

CVE-2020-24331

Modified

Source-cve@mitre.org

Published At-13 Aug, 2020 | 17:15

Updated At-07 Nov, 2023 | 03:19

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file (which contains various settings related to this daemon).

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

trousers_project>>trousers>>Versions up to 0.3.14(inclusive)

cpe:2.3:a:trousers_project:trousers:*:*:*:*:*:*:*:*

Fedora Project

>>fedora>>33

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-269	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.openwall.com/lists/oss-security/2020/08/14/1	cve@mitre.org	Exploit Mailing List Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1164472	cve@mitre.org	Exploit Issue Tracking Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SSDL7COIFCZQMUBNAASNMKMX7W5JUHRD/	cve@mitre.org	N/A
https://seclists.org/oss-sec/2020/q2/att-135/tcsd_fixes.patch	cve@mitre.org	Mailing List Patch Third Party Advisory
https://sourceforge.net/p/trousers/mailman/message/37015817/	cve@mitre.org	Exploit Mailing List Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History