Description (CNA)
lib/install/install.go in cnlh nps through 0.23.2 uses 0777 permissions for /usr/local/bin/nps and/or /usr/bin/nps, leading to a file overwrite by a local user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/cnlh/nps/issues/176
- https://github.com/cnlh/nps/commit/7178b3380720e910d283036a8d39879a94105515
ADP enrichment
No English description supplied.