CVE-2011-5275

Published: 21 March 2014

The install script in Domain Technologie Control (DTC) before 0.34.1 gives sudo permissions for chrootuid to the dtc user, which makes it easier for context-dependent users to gain privileges.

Priority

Status

Package	Release	Status
dtc Launchpad, Ubuntu, Debian	lucid	Ignored (end of life)
	precise	Does not exist
	quantal	Does not exist
	saucy	Does not exist
	upstream	Needs triage

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637618
http://www.debian.org/security/2011/dsa-2365
http://git.gplhost.com/gitweb/?p=dtc.git;a=blob;f=debian/changelog;hb=3eb6ef5cea6c571aae5e49e1930de778eca280c3
https://www.cve.org/CVERecord?id=CVE-2011-5275
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.