A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownership or group changes failed due to permission errors. This can lead to security misconfigurations where administrative scripts incorrectly assume that ownership has been successfully transferred across a directory tree.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NUutils Coreutils
APPUutils< 0.6.0
Related vulnerabilities
A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility...
A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing...
A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mec...
A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils. The u...
Tryb rekurencyjny (-R) narzędzia chmod w uutils coreutils nieprawidłowo obsługuje kody wyjścia podczas przetwa...