Vulnerability in Nathan Neulinger Cgiwrap
CVE-2005-3254
The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether it can perform a seteuid operation, which could allow attackers to execute code as other system UIDs that are greater than the minimum value, which should be 1000 on Debian systems.
EPSS: 0.026 (84.0th percentile) — read the EPSS interpretation.
Affected products
- Nathan_neulinger Cgiwrap — versions 1.0, 2.0, 2.1
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)