CVE-2004-2778

Severity: high (CVSS 7.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-06-27 · updated 2026-06-16
Weakness: CWE-264

Description

Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted commands via navigating to the affected directories, or executing the affected commands.

Affected products

gentoo Portage: all versions

References

http://www.openwall.com/lists/oss-security/2017/01/28/7
https://bugs.gentoo.org/show_bug.cgi?id=141619
https://bugs.gentoo.org/show_bug.cgi?id=396153
https://bugs.gentoo.org/show_bug.cgi?id=58611
https://bugs.gentoo.org/show_bug.cgi?id=607426
https://bugs.gentoo.org/show_bug.cgi?id=607430
http://www.openwall.com/lists/oss-security/2017/01/28/7
https://bugs.gentoo.org/show_bug.cgi?id=141619
https://bugs.gentoo.org/show_bug.cgi?id=396153
https://bugs.gentoo.org/show_bug.cgi?id=58611
https://bugs.gentoo.org/show_bug.cgi?id=607426
https://bugs.gentoo.org/show_bug.cgi?id=607430

Get alerted when CVE-2004-2778 or the next vulnerability affects your stack