CyberRota Analysis
AI-GeneratedAn integer overflow vulnerability in the `do_lastlog()` function of Cockpit affects ILP32 builds, allowing low-privileged authenticated users with large User IDs to manipulate offset calculations. This could lead to unauthorized access to, and modification of, other users' `lastlog` records, potentially compromising sensitive login information. Organizations using Cockpit should prioritize remediation to mitigate the risk of unauthorized data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in Cockpit. An integer overflow vulnerability in the `do_lastlog()` function, specifically in the offset calculation for `lastlog` entries on ILP32 (Integer, Long, Pointer 32-bit) builds, can be exploited. A low-privileged authenticated user with a specially provisioned large User ID (UID) can cause the computed offset to wrap around. This allows the user to perform unauthorized reads and writes to other users' `lastlog` records, potentially disclosing or altering sensitive login accounting information.