Main
Vulnerability Database
Exploits
ID:3874 - Exploit for Permissions, Privileges, and Access Controls in OSSEC - CVE-2015-3222
ID:3874 - Exploit for Permissions, Privileges, and Access Controls in OSSEC - CVE-2015-3222
Published: August 9, 2020
Vulnerability identifier: #VU38351
Vulnerability risk: Low
CVE-ID: CVE-2015-3222
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
OSSEC
OSSEC
Link to public exploit:
Vulnerability description
The vulnerability allows a local authenticated user to execute arbitrary code.
syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root.
Remediation
Install update from vendor's website.