{"id":"CVE-2018-1000857","details":"log-user-session version 0.7 and earlier contains a Directory Traversal vulnerability in Main SUID-binary /usr/local/bin/log-user-session that can result in User to root privilege escalation. This attack appear to be exploitable via Malicious unprivileged user executes the vulnerable binary/(remote) environment variable manipulation similar shell-shock also possible.","modified":"2026-07-08T11:47:46.069343Z","published":"2018-12-20T17:29:00.410Z","references":[{"type":"EVIDENCE","url":"https://www.halfdog.net/Security/2018/LogUserSessionLocalRootPrivilegeEscalation/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/open-ch/log-user-session","events":[{"introduced":"0"},{"last_affected":"cddc3ad0c1f73f569d009fdfcf048ef4f1f83726"}],"database_specific":{"cpe":"cpe:2.3:a:open-systems:log-user-session:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"0.7"}],"source":"CPE_RANGE"}}],"versions":["0.7","0.6","0.5","0.4","0.3","0.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000857.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}