Vulnerability in Gnu Rush

CVE-2013-6889

GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option.

EPSS: 0.005 (38.6th percentile) — read the EPSS interpretation.

Affected products

  • Gnu Rush — versions 1.7
  • N/a — versions n/a

Weakness classification (CWE)

References