| Package | Affected versions | Patched versions |
|---|---|---|
| portage | ≤ 2.3.84 |
Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account, because this directory is writable in between a call to emake and a call to fowners.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free