Pardus Boot Repair
Monthly
OS command injection in TUBITAK BILGEM's Pardus Boot Repair allows a local low-privileged user to execute arbitrary OS commands, likely resulting in full system compromise. The vulnerability (CWE-78) affects all versions prior to 1.0.8 of this boot repair utility for the Pardus Linux distribution. Given that boot repair tools typically run with elevated (root) privileges, this flaw effectively enables local privilege escalation to full system control with high confidentiality, integrity, and availability impact.
OS command injection in TUBITAK BILGEM's Pardus Boot Repair allows a local low-privileged user to execute arbitrary OS commands, likely resulting in full system compromise. The vulnerability (CWE-78) affects all versions prior to 1.0.8 of this boot repair utility for the Pardus Linux distribution. Given that boot repair tools typically run with elevated (root) privileges, this flaw effectively enables local privilege escalation to full system control with high confidentiality, integrity, and availability impact.