Calibre Multiple Local Security Vulnerabilities
BID:50491
Info
Calibre Multiple Local Security Vulnerabilities
| Bugtraq ID: | 50491 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 02 2011 12:00AM |
| Updated: | Nov 07 2011 07:03AM |
| Credit: | Jason A. Donenfeld |
| Vulnerable: |
Calibre E-Book Reader 0 |
| Not Vulnerable: | |
Discussion
Calibre Multiple Local Security Vulnerabilities
Calibre is prone to multiple local security vulnerabilities, including:
1. A security vulnerability that will allow attackers to create root-owned directories
2. Multiple security-bypass vulnerabilities
3. A command injection vulnerability
4. A local privilege-escalation vulnerability
Local attackers can exploit these issues to compromise the affected computer, create and delete arbitrary directories, execute arbitrary commands, and perform other attacks.
Calibre is prone to multiple local security vulnerabilities, including:
1. A security vulnerability that will allow attackers to create root-owned directories
2. Multiple security-bypass vulnerabilities
3. A command injection vulnerability
4. A local privilege-escalation vulnerability
Local attackers can exploit these issues to compromise the affected computer, create and delete arbitrary directories, execute arbitrary commands, and perform other attacks.
Exploit / POC
Calibre Multiple Local Security Vulnerabilities
The following exploits are available:
The following exploits are available:
Solution / Fix
Calibre Multiple Local Security Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Calibre Multiple Local Security Vulnerabilities
References:
References:
- CVE request for Calibre (Calibre)
- Vendor Homepage (Calibre)