rPath rMake Local Privilege Escalation Vulnerability

Bugtraq ID:	25899
Class:	Design Error
CVE:	CVE-2007-5194
Remote:	No
Local:	Yes
Published:	Oct 02 2007 12:00AM
Updated:	May 07 2015 05:35PM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	rPath rPath Linux 1 rPath rMake 1.0.11
Not Vulnerable:	rPath rMake 1.0.12

rPath rMake Local Privilege Escalation Vulnerability

rPath rMake is prone to a local privilege-escalation vulnerability that stems from a design error.

An attacker may exploit this vulnerability to execute arbitrary code with superuser privileges. This may facilitate a complete compromise of affected computers.

This vulnerability affects rMake 1.0.11; other versions may also be affected.

rPath rMake Local Privilege Escalation Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

rPath rMake Local Privilege Escalation Vulnerability

Solution:
The vendor has released fixes to address this issue. Please see the references for more information.

rPath rMake Local Privilege Escalation Vulnerability

References:

• rPath Homepage (rPath)
  
• rPath issue RMK-634 (rPath)