CVE-2017-18225

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-18225
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-18225.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-18225
Published
2018-03-12T04:29:00Z
Modified
2026-07-08T11:48:10Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The Gentoo net-im/jabberd2 package through 2.6.1 installs jabberd, jabberd2-c2s, jabberd2-router, jabberd2-s2s, and jabberd2-sm in /usr/bin owned by the jabber account, which might allow local users to gain privileges by leveraging access to this account and then waiting for root to execute one of these programs.

References

Affected packages

Git / github.com/jabberd2/jabberd2

Affected ranges

Type
GIT
Repo
https://github.com/jabberd2/jabberd2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
d3a2b96bea5b36cffd6e4d3e1eb6a47d2586bd1f
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:jabberd2:jabberd2:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.6.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

jabberd-2.*
jabberd-2.6.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-18225.json"