CVE-2016-3067 in cygwininfo

Summary

Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

03/10/2016

Disclosure

04/21/2017

CPE

ready

CVSS

8.0

EPSS

0.00590

Activities

Very Low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-3067
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-3067
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-3067/

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!