| Package | Affected versions | Patched versions |
|---|---|---|
| upstart | ≤ 1.13.2-0ubuntu7 | |
| vivid | = 15.04 |
The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubuntu Vivid 15.04, allows local users to execute arbitrary commands and gain privileges via a crafted file in /run/user/*/upstart/sessions/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free