CVE-2011-5275
gplhost domain technologie control: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days.
The install script in Domain Technologie Control (DTC) before 0.34.1 gives sudo permissions for chrootuid to the dtc user, which makes it easier for context-dependent users to gain privileges.
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-11-01)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
References
- http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bhb=3eb6ef5cea6c571aae5e49e1930de778eca280c3
- http://www.debian.org/security/2011/dsa-2365
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637618
- http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bhb=3eb6ef5cea6c571aae5e49e1930de778eca280c3
- http://www.debian.org/security/2011/dsa-2365