[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FD] Hue 3.7.1 Local Privilege Escalation

To: <ewilded@xxxxxxxxx>
Subject: [FD] Hue 3.7.1 Local Privilege Escalation
From: Henri Salo <henri@xxxxxxx>
Date: Fri, 22 May 2015 10:11:43 +0300

Hue project responded in two different messages:

"""
This is not changed, the Hue project provides this command as a helper,         
                                                      
this is up to the packaging distribution to change the permissions of/move      
                                                      
the files accordingly.                        
"""

"""
Actually, the root privilege was only needed in Hue 2 when using the Shell      
                                                      
app, there is no Shell app anymore since Hue 3 so indeed we should remove       
                                                      
the part warning about not being run as root
"""

-- 
Henri Salo

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

References:
- [FD] Hue 3.7.1 Local Privilege Escalation
  - From: Julian Horoszkiewicz

Prev by Date: [FD] 0day Mailbird XSS
Next by Date: [FD] Multiple Vulnerabilities in Openlitespeed <= 1.3.10 - CVE-b045-73d a.k.a. Analbleed.
Previous by thread: [FD] Hue 3.7.1 Local Privilege Escalation
Next by thread: [FD] Ambari Server 1.7.0 Local Privilege Escalation
Index(es):
- Date
- Thread