Incorrect Group Ownership Vulnerability in Gentoo app-backup/burp Package

CVE-2017-18285 · LOW Severity

AV:L/AC:L/AU:N/C:P/I:P/A:N

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change.

Learn more about our Cis Benchmark Audit For Debian Family Linux.