CVE-2004-2778

7.1 highEPSS 0.3%

High (7.1) in gentoo portage. EPSS 0.3% chance of exploitation in the next 30 days.

Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted commands via navigating to the affected directories, or executing the affected commands.

Severity

CVSS 3.0

7.1 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2017-06-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

gentoo:portage

References

http://www.openwall.com/lists/oss-security/2017/01/28/7
https://bugs.gentoo.org/show_bug.cgi?id=141619
https://bugs.gentoo.org/show_bug.cgi?id=396153
https://bugs.gentoo.org/show_bug.cgi?id=58611
https://bugs.gentoo.org/show_bug.cgi?id=607426

Check your stack JSON