syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root.
| Software | From | Fixed in |
|---|---|---|
| ossec / ossec | 2.8.0 | 2.8.0.x |
| ossec / ossec | 2.7.0 | 2.7.0.x |
| ossec / ossec | 2.7.1 | 2.7.1.x |
| ossec / ossec | 2.8.1 | 2.8.1.x |