CVE Catalog
CVE-2016-3067
CriticalSummary
Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.
Risk Assessment
Attackers can exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to update Cygwin to version 2.5.0 or later to mitigate this vulnerability.
Original NVD description (English source)
Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.