CyberRota Analysis
AI-GeneratedVersions of uutils coreutils prior to 0.10.0 are vulnerable due to improper handling of setuid and setgid modes during ownership changes, potentially allowing privileged users to retain ownership of setuid executables. This flaw enables attackers to execute these leftover files with elevated privileges, posing a significant security risk on capability-restricted systems. Organizations using affected versions should prioritize patching to mitigate the risk of privilege escalation attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
uutils coreutils versions before 0.10.0 apply setuid or setgid mode to install destinations before finalizing ownership changes, allowing privileged users to leave setuid executables owned by the privileged invoker when ownership changes fail. Attackers can execute leftover setuid files with elevated privileges when ownership change operations fail on capability-restricted systems.