CVE:CVE-2004-2611
CNNVD:CNNVD-200412-1204
Sophster suite 0.9.6 28 May 2004 (也称为0.9.6-r5)之前版本中的Change Permissions函数，可能包括Sophster， FreeSophster， 和FreeSophsterPAM改变文件时删除(1) setuid， (2) setgid，和(3) sticky位，攻击者可以提升特权或进行其他非授权行为。
solution:Upgrade steven_schaefer sophster to a higher version than 0.9.5_r8,0.9.5_r10,0.9.5_r12,0.9.5_r15,0.9.6_r1,0.9.6_r2,0.9.6_r3,and avoid the version 0.9.5_r8,0.9.5_r10,0.9.5_r12,0.9.5_r15,0.9.6_r1,0.9.6_r2,0.9.6_r3