CVE-2011-4099: Medium severity libcap vulnerability
Description of problem: The capsh program has a --chroot commandline option. Inspecting the code shows that it does not do a chdir("/") after calling chroot. This means that '.' is outside the chroot.
Additional info: http://cwe.mitre.org/data/definitions/243.html
Other sources
The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4099?
CVE-2011-4099 has a moderate severity level as it exposes the system to potential privilege escalation.
How do I fix CVE-2011-4099?
To fix CVE-2011-4099, update the libcap package to version 2.21 or later where the issue has been resolved.
What software is affected by CVE-2011-4099?
CVE-2011-4099 affects specific versions of the libcap package, including versions 2.00 to 2.20.
What is the impact of CVE-2011-4099?
The impact of CVE-2011-4099 is that an unprivileged user can potentially escape from a chroot environment.
Is CVE-2011-4099 a code vulnerability?
Yes, CVE-2011-4099 is a code vulnerability due to the improper handling of the chroot system call.