CVE-2015-2285

The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubuntu Vivid 15.04, allows local users to execute arbitrary commands and gain privileges via a crafted file in /run/user/*/upstart/sessions/.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.01% chance of exploitation in the next 30 days, 61th percentile

Published

2015-03-12

Updated

2024-09-17

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/41765

References

• CVE Record
• NVD entry

Related

• CVE-2015-2284
• CVE-2015-2291
• CVE-2015-2281
• CVE-2015-2292
• CVE-2015-2280
• CVE-2015-2294