vulnerability

FreeBSD: VID-e37a0a7b-e1a7-11ea-9538-0c9d925bbbc0 (CVE-2020-24332): security/trousers -- several vulnerabilities

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:C)
Published
Aug 18, 2020
Added
Aug 20, 2020
Modified
Dec 10, 2025

Description

the TrouSerS project reports reports: If the tcsd daemon is started with root privileges, it fails to drop the root gid after it is no longer needed. If the tcsd daemon is started with root privileges, the tss user has read and write access to the /etc/tcsd.conf file. If the tcsd daemon is started with root privileges, the creation of the system.data file is prone to symlink attacks.

Solution

freebsd-upgrade-package-trousers
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.