A race condition was found in the mkhomedir tool shipped with the oddjob package in versions before 0.34.5 and 0.34.6 wherein, during the home creation, mkhomedir copies the /etc/skel directory into the newly created home and changes its ownership to the home's user without properly checking the homedir path. This flaw allows an attacker to leverage this issue by creating a symlink point to a target folder, which then has its ownership transferred to the new home directory's unprivileged user.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oddjobUpgrade oddjob-mkhomedir | May 4, 2022 | May 27, 2020 |
| Centos_linux | — | Upgrade oddjob-debugsourceUpgrade oddjobUpgrade oddjob-mkhomedir-debuginfoUpgrade oddjob-mkhomedirUpgrade oddjob-debuginfo | Nov 5, 2020 | May 27, 2020 |
| Debian | — | Upgrade oddjob | Jul 30, 2024 | May 27, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade oddjob-mkhomedirUpgrade oddjob | Feb 22, 2021 | May 27, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade oddjobUpgrade oddjob-mkhomedir | Sep 28, 2020 | May 27, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade oddjob-mkhomedirUpgrade oddjob | Nov 2, 2020 | May 27, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade oddjobUpgrade oddjob-mkhomedir | Dec 15, 2020 | May 27, 2020 |
| Oracle_linux | — | Upgrade oddjob-mkhomedirUpgrade oddjob | Nov 12, 2020 | May 7, 2020 |
| Redhat_linux | — | Upgrade oddjobUpgrade oddjob-mkhomedirNo solution existsUpgrade oddjob-debuginfoUpgrade oddjob-debugsourceUpgrade oddjob-mkhomedir-debuginfo | Nov 5, 2020 | May 27, 2020 |
| Ubuntu | — | Upgrade oddjob-mkhomedir (Ubuntu Pro)Upgrade oddjob (Ubuntu Pro) | Mar 22, 2023 | May 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub