CVE-2017-18285: High severity burp suite vulnerability
The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2017-18285.
What is the severity of CVE-2017-18285?
CVE-2017-18285 has a severity rating of 7.1 (high).
What software is affected by CVE-2017-18285?
The Burp package before version 2.1.32 is affected by CVE-2017-18285.
How can local users exploit CVE-2017-18285?
Local users can exploit CVE-2017-18285 by obtaining read and write access to arbitrary files through the /etc/burp directory.
Are there any reference links for CVE-2017-18285?
Yes, you can find more information about CVE-2017-18285 at the following links: [link1](https://bugs.gentoo.org/641842), [link2](https://security.gentoo.org/glsa/201806-03), [link3](https://security.gentoo.org/glsa/201904-05).