Home / Vulnerability Database / C or C++ : Unsafe function: setuid
C/C++
C or C++ : Unsafe function: setuid
Classification
CWE
Overview
The application defines a function that uses setuid but does not check the returned value. This may lead to incorrect behavior of the application, crash, or violation of valuable data confidentiality.
setuid and setgid are permission flags in Unix-like operating systems that allow users to run executable files with the privileges of the owner or group of the executable file. If an error occurs in this function, the following code may be executed not with the privileges that the developer expects.
MEDIUM
DerScanner Severity Score
Do you want to fix C or C++ : Unsafe function: setuid in your application?
See also
C/C++
C or C++ : Dead store
C/C++
C or C++ : Use after free
C/C++
