Threats Tagged 'ghsa-m5xr-vr49-p6gj'

A local privilege escalation vulnerability exists in the optional dnscache package of Zimbra Collaboration Suite (ZCS) versions 10.1.16 and 10.1.21. The vulnerability allows the Unix zimbra account to gain root privileges by exploiting a passwordless sudo policy that permits arbitrary arguments to the zmunbound wrapper. This wrapper forwards arguments to Unbound without restricting the configuration path, enabling an attacker to supply a malicious configuration that retains root privileges and disables chroot. This can lead to disclosure of sensitive files such as password hashes and private keys, as well as corruption of privileged configuration files, potentially preventing affected services from starting.