{"id":6436,"date":"2017-01-30T14:20:38","date_gmt":"2017-01-30T22:20:38","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/01\/30\/news-273\/"},"modified":"2017-01-30T14:20:38","modified_gmt":"2017-01-30T22:20:38","slug":"news-273","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/01\/30\/news-273\/","title":{"rendered":"SSD Advisory \u2013 NCurses 5.9 Local Privilege Escalation"},"content":{"rendered":"
\n

Vulnerability Summary<\/strong>
The following advisory describes an Local Privilege Escalation vulnerability in NCurses, version 5.9. <\/p>\n

Credit<\/strong>
An independent security researcher Dawid Golunski (https:\/\/legalhackers.com\/<\/a>) has reported this vulnerability to Beyond Security\u2019s SecuriTeam Secure Disclosure program<\/p>\n

Vendor Responses<\/strong>
NCurses has released a patch<\/a> to address the vulnerability.<\/p>\n

Thomas Dickey has also added the following statement “I don’t know of any actual packages which have traces enabled by default”.<\/p>\n

<\/span><\/p>\n

Vulnerability Details<\/strong>
When NCurses, downloaded from official mirror<\/p>\n<\/p>\n

\t\t<\/p>\n

\n
<\/span> \t\t\t<\/p>\n
\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n
<\/div>\n