Home / Vulnerability Database / C or C++ : Unsafe function: setuid
C/C++

C or C++ : Unsafe function: setuid

Classification

Overview

The application defines a function that uses setuid but does not check the returned value. This may lead to incorrect behavior of the application, crash, or violation of valuable data confidentiality.

setuid and setgid are permission flags in Unix-like operating systems that allow users to run executable files with the privileges of the owner or group of the executable file. If an error occurs in this function, the following code may be executed not with the privileges that the developer expects.

MEDIUM

DerScanner Severity Score

Do you want to fix C or C++ : Unsafe function: setuid in your application?

See also

C/C++

C or C++ : Dead store

C/C++

C or C++ : Use after free

C/C++

C or C++ : va_list uninitialized