| Package | Affected versions | Patched versions |
|---|---|---|
| sophster | = 0.9.5_r10= 0.9.5_r12= 0.9.5_r15= 0.9.5_r8= 0.9.6_r1= 0.9.6_r2= 0.9.6_r3 |
The Change Permissions function in the Sophster suite before 0.9.6 28 May 2004 (aka 0.9.6-r5), possibly including Sophster, FreeSophster, and FreeSophsterPAM, removes the (1) setuid, (2) setgid, and (3) sticky bits when changing a file, which might allow attackers to gain privileges or conduct other unauthorized activities.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free