CVE-2020-24331

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file (which contains various settings related to this daemon).

• CWE-269

• http://www.openwall.com/lists/oss-security/2020/08/14/1Exploit, Mailing List, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1164472Exploit, Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SSDL7COIFCZQMUBNAASNMKMX7W5JUHRD/
• https://seclists.org/oss-sec/2020/q2/att-135/tcsd_fixes.patchMailing List, Patch, Third Party Advisory
• https://sourceforge.net/p/trousers/mailman/message/37015817/Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/08/14/1Exploit, Mailing List, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1164472Exploit, Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SSDL7COIFCZQMUBNAASNMKMX7W5JUHRD/
• https://seclists.org/oss-sec/2020/q2/att-135/tcsd_fixes.patchMailing List, Patch, Third Party Advisory
• https://sourceforge.net/p/trousers/mailman/message/37015817/Exploit, Mailing List, Third Party Advisory

Published

Aug 13, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-24313Etoile Web Design Ultimate Appointment Booking & Scheduling …6.1
• CVE-2020-24314Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does n…6.1
• CVE-2020-24315Vinoj Cardoza WordPress Poll Plugin v36 and lower executes S…7.5
• CVE-2020-24316WP Plugin Rednumber Admin Menu v1.1 and lower does not sanit…6.1
• CVE-2020-24327Server Side Request Forgery (SSRF) vulnerability exists in D…5.3
• CVE-2020-24330An issue was discovered in TrouSerS through 0.3.14. If the t…7.8
• CVE-2020-24332An issue was discovered in TrouSerS through 0.3.14. If the t…5.5
• CVE-2020-24333A vulnerability in Arista’s CloudVision Portal (CVP) prior t…6.5
• CVE-2020-24334The code that processes DNS responses in uIP through 1.0, as…8.2
• CVE-2020-24335An issue was discovered in uIP through 1.0, as used in Conti…7.5
• CVE-2020-24336An issue was discovered in Contiki through 3.0 and Contiki-N…9.8
• CVE-2020-24337An issue was discovered in picoTCP and picoTCP-NG through 1.…7.5