Vulnerability: Non-Standard File Generation in Open Buildservice

CVE-2015-0796 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service.

Learn more about our User Device Pen Test.