Lucene search
GoogleOSV:DLA-28-1HistoryAug 01, 2014 - 12:00 a.m.
augeas - security update
2014-08-0100:00:00
Google
osv.dev
8
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
Multiple race conditions were discovered in augeas when saving
configuration files which expose it to symlink attacks.
Write access to the directory where the configuration file is located
is required by the attacker.
For Debian 6 Squeeze, these issues have been fixed in augeas version 0.7.2-1+deb6u1
References
Related
openvas
openvas
Debian: Security Advisory (DLA-28-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2014-0058)
2022-01-28 00:00:00
RedHat Update for augeas RHSA-2013:1537-02
2013-11-21 00:00:00
securityvulns
securityvulns
[ MDVSA-2014:022 ] augeas
2014-01-29 00:00:00
Augeas multiple security vulnerabilities
2014-01-29 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : augeas (MDVSA-2014:022)
2014-01-27 00:00:00
Debian DLA-28-1 : augeas security update
2015-03-26 00:00:00
SuSE 11.3 Security Update : augeas (SAT Patch Number 9574)
2014-08-14 00:00:00
debian
debian
[DLA 28-1] augeas security update
2014-08-01 11:12:53
mageia
mageia
Updated augeas package fixes security vulnerabilities
2014-02-12 21:10:49
ubuntucve
ubuntucve
centos
centos
augeas security update
2013-11-26 13:31:08
augeas security update
2014-01-20 17:58:19
oraclelinux
oraclelinux
augeas security, bug fix, and enhancement update
2013-11-25 00:00:00
augeas security update
2014-01-20 00:00:00
redhat
redhat
(RHSA-2013:1537) Low: augeas security, bug fix, and enhancement update
2013-11-21 00:00:00
(RHSA-2014:0044) Moderate: augeas security update
2014-01-20 00:00:00
(RHSA-2013:1527) Important: rhev-hypervisor6 security and bug fix update
2013-11-21 00:00:00
veracode
veracode
Sensitive Information Disclosure
2019-05-02 04:58:48
World Writable Permissions
2019-01-15 08:55:29
Symlink Attack
2019-01-15 09:01:38
amazon
amazon
Low: augeas
2013-12-02 20:28:00
Medium: augeas
2014-02-03 15:28:00
prion
prion
Code injection
2014-01-23 00:55:00
Design/Logic Flaw
2013-11-23 18:55:00
Information disclosure
2013-11-23 18:55:00
fedora
fedora
[SECURITY] Fedora 19 Update: augeas-1.2.0-1.fc19
2014-03-15 15:06:08
[SECURITY] Fedora 20 Update: augeas-1.2.0-1.fc20
2014-03-15 15:11:16
cve
cve
debiancve
debiancve
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
Related for OSV:DLA-28-1