[CentOS] Heads up on local root escalation

James Hogarth

james.hogarth at gmail.com
Mon May 12 18:13:12 UTC 2014


Remember to be especially aware if you have systems that can potentially
have code uploaded and run (ftp to httpd vhost or improper php config and
file ownership/permissions).

This does not affect el5 ... an el6 update is pending.

https://access.redhat.com/security/cve/CVE-2014-0196



More information about the CentOS mailing list