Search
Find a vulnerability
Search criteria
4 vulnerabilities found for beep by beep_project
CVE-2018-1000532 (GCVE-0-2018-1000532)
Vulnerability from nvd – Published: 2018-06-26 16:00 – Updated: 2024-08-05 12:40
VLAI
Summary
beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can result in Local unprivileged user can inhibit execution of arbitrary programs by other users, allowing DoS. This attack appear to be exploitable via The system must allow local users to run beep.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://github.com/johnath/beep/issues/11#issueco… | x_refsource_MISC |
Date Public
2018-06-26 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T12:40:47.227Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/johnath/beep/issues/11#issuecomment-379514298"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"dateAssigned": "2018-06-23T00:00:00.000Z",
"datePublic": "2018-06-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can result in Local unprivileged user can inhibit execution of arbitrary programs by other users, allowing DoS. This attack appear to be exploitable via The system must allow local users to run beep."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-06-26T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/johnath/beep/issues/11#issuecomment-379514298"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"DATE_ASSIGNED": "2018-06-23T11:22:33.045951",
"DATE_REQUESTED": "2018-04-08T17:44:03",
"ID": "CVE-2018-1000532",
"REQUESTER": "agwa@andrewayer.name",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can result in Local unprivileged user can inhibit execution of arbitrary programs by other users, allowing DoS. This attack appear to be exploitable via The system must allow local users to run beep."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/johnath/beep/issues/11#issuecomment-379514298",
"refsource": "MISC",
"url": "https://github.com/johnath/beep/issues/11#issuecomment-379514298"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2018-1000532",
"datePublished": "2018-06-26T16:00:00.000Z",
"dateReserved": "2018-04-08T00:00:00.000Z",
"dateUpdated": "2024-08-05T12:40:47.227Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-0492 (GCVE-0-2018-0492)
Vulnerability from nvd – Published: 2018-04-03 07:00 – Updated: 2024-08-05 03:28
VLAI
Summary
Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation.
Severity
No CVSS data available.
CWE
- race
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/44452/ | exploitx_refsource_EXPLOIT-DB |
| https://www.debian.org/security/2018/dsa-4163 | vendor-advisoryx_refsource_DEBIAN |
| https://security-tracker.debian.org/tracker/CVE-2… | x_refsource_CONFIRM |
| https://lists.debian.org/debian-security-announce… | x_refsource_CONFIRM |
| https://lists.debian.org/debian-lts-announce/2018… | mailing-listx_refsource_MLIST |
| https://security.gentoo.org/glsa/201805-15 | vendor-advisoryx_refsource_GENTOO |
Date Public
2018-04-03 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:28:10.587Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "44452",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/44452/"
},
{
"name": "DSA-4163",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2018/dsa-4163"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security-tracker.debian.org/tracker/CVE-2018-0492"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://lists.debian.org/debian-security-announce/2018/msg00089.html"
},
{
"name": "[debian-lts-announce] 20180403 [SECURITY] [DLA 1338-1] beep security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00002.html"
},
{
"name": "GLSA-201805-15",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201805-15"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "beep",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "beep"
}
]
}
],
"datePublic": "2018-04-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "race",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-21T09:57:02.000Z",
"orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
"shortName": "debian"
},
"references": [
{
"name": "44452",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/44452/"
},
{
"name": "DSA-4163",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2018/dsa-4163"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security-tracker.debian.org/tracker/CVE-2018-0492"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://lists.debian.org/debian-security-announce/2018/msg00089.html"
},
{
"name": "[debian-lts-announce] 20180403 [SECURITY] [DLA 1338-1] beep security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00002.html"
},
{
"name": "GLSA-201805-15",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201805-15"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@debian.org",
"ID": "CVE-2018-0492",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "beep",
"version": {
"version_data": [
{
"version_value": "beep"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "race"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "44452",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/44452/"
},
{
"name": "DSA-4163",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2018/dsa-4163"
},
{
"name": "https://security-tracker.debian.org/tracker/CVE-2018-0492",
"refsource": "CONFIRM",
"url": "https://security-tracker.debian.org/tracker/CVE-2018-0492"
},
{
"name": "https://lists.debian.org/debian-security-announce/2018/msg00089.html",
"refsource": "CONFIRM",
"url": "https://lists.debian.org/debian-security-announce/2018/msg00089.html"
},
{
"name": "[debian-lts-announce] 20180403 [SECURITY] [DLA 1338-1] beep security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00002.html"
},
{
"name": "GLSA-201805-15",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201805-15"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
"assignerShortName": "debian",
"cveId": "CVE-2018-0492",
"datePublished": "2018-04-03T07:00:00.000Z",
"dateReserved": "2017-11-27T00:00:00.000Z",
"dateUpdated": "2024-08-05T03:28:10.587Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-1000532 (GCVE-0-2018-1000532)
Vulnerability from cvelistv5 – Published: 2018-06-26 16:00 – Updated: 2024-08-05 12:40
VLAI
Summary
beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can result in Local unprivileged user can inhibit execution of arbitrary programs by other users, allowing DoS. This attack appear to be exploitable via The system must allow local users to run beep.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://github.com/johnath/beep/issues/11#issueco… | x_refsource_MISC |
Date Public
2018-06-26 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T12:40:47.227Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/johnath/beep/issues/11#issuecomment-379514298"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"dateAssigned": "2018-06-23T00:00:00.000Z",
"datePublic": "2018-06-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can result in Local unprivileged user can inhibit execution of arbitrary programs by other users, allowing DoS. This attack appear to be exploitable via The system must allow local users to run beep."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-06-26T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/johnath/beep/issues/11#issuecomment-379514298"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"DATE_ASSIGNED": "2018-06-23T11:22:33.045951",
"DATE_REQUESTED": "2018-04-08T17:44:03",
"ID": "CVE-2018-1000532",
"REQUESTER": "agwa@andrewayer.name",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can result in Local unprivileged user can inhibit execution of arbitrary programs by other users, allowing DoS. This attack appear to be exploitable via The system must allow local users to run beep."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/johnath/beep/issues/11#issuecomment-379514298",
"refsource": "MISC",
"url": "https://github.com/johnath/beep/issues/11#issuecomment-379514298"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2018-1000532",
"datePublished": "2018-06-26T16:00:00.000Z",
"dateReserved": "2018-04-08T00:00:00.000Z",
"dateUpdated": "2024-08-05T12:40:47.227Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-0492 (GCVE-0-2018-0492)
Vulnerability from cvelistv5 – Published: 2018-04-03 07:00 – Updated: 2024-08-05 03:28
VLAI
Summary
Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation.
Severity
No CVSS data available.
CWE
- race
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/44452/ | exploitx_refsource_EXPLOIT-DB |
| https://www.debian.org/security/2018/dsa-4163 | vendor-advisoryx_refsource_DEBIAN |
| https://security-tracker.debian.org/tracker/CVE-2… | x_refsource_CONFIRM |
| https://lists.debian.org/debian-security-announce… | x_refsource_CONFIRM |
| https://lists.debian.org/debian-lts-announce/2018… | mailing-listx_refsource_MLIST |
| https://security.gentoo.org/glsa/201805-15 | vendor-advisoryx_refsource_GENTOO |
Date Public
2018-04-03 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:28:10.587Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "44452",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/44452/"
},
{
"name": "DSA-4163",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2018/dsa-4163"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security-tracker.debian.org/tracker/CVE-2018-0492"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://lists.debian.org/debian-security-announce/2018/msg00089.html"
},
{
"name": "[debian-lts-announce] 20180403 [SECURITY] [DLA 1338-1] beep security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00002.html"
},
{
"name": "GLSA-201805-15",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201805-15"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "beep",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "beep"
}
]
}
],
"datePublic": "2018-04-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "race",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-21T09:57:02.000Z",
"orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
"shortName": "debian"
},
"references": [
{
"name": "44452",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/44452/"
},
{
"name": "DSA-4163",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2018/dsa-4163"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security-tracker.debian.org/tracker/CVE-2018-0492"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://lists.debian.org/debian-security-announce/2018/msg00089.html"
},
{
"name": "[debian-lts-announce] 20180403 [SECURITY] [DLA 1338-1] beep security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00002.html"
},
{
"name": "GLSA-201805-15",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201805-15"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@debian.org",
"ID": "CVE-2018-0492",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "beep",
"version": {
"version_data": [
{
"version_value": "beep"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "race"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "44452",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/44452/"
},
{
"name": "DSA-4163",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2018/dsa-4163"
},
{
"name": "https://security-tracker.debian.org/tracker/CVE-2018-0492",
"refsource": "CONFIRM",
"url": "https://security-tracker.debian.org/tracker/CVE-2018-0492"
},
{
"name": "https://lists.debian.org/debian-security-announce/2018/msg00089.html",
"refsource": "CONFIRM",
"url": "https://lists.debian.org/debian-security-announce/2018/msg00089.html"
},
{
"name": "[debian-lts-announce] 20180403 [SECURITY] [DLA 1338-1] beep security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00002.html"
},
{
"name": "GLSA-201805-15",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201805-15"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
"assignerShortName": "debian",
"cveId": "CVE-2018-0492",
"datePublished": "2018-04-03T07:00:00.000Z",
"dateReserved": "2017-11-27T00:00:00.000Z",
"dateUpdated": "2024-08-05T03:28:10.587Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}