1554 matches found
CVE-2016-10345
In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...
CVE-2016-10345
In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...
CVE-2016-10345
In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...
CVE-2016-10345
In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...
CVE-2016-10345
In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...
PT-2017-7876
Name of the Vulnerable Software and Affected Versions Phusion Passenger versions prior to 5.1.0 Description The issue arises from the use of a known /tmp filename during the execution of the passenger-install-nginx-module, potentially allowing local attackers to gain the privileges of the passeng...
Insecure /Tmp File Handling
Salt handles /tmp files through salt/modules/chef.py insecurely. This may allow attackers to replace the file with a malicious file...
Insecure /tmp File Handling
Salt handles /tmp files through salt/modules/serverdensitydevice.py insecurely. This may allow attackers to replace the file with a malicious file...
Code injection
Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges...
CVE-2015-1839
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...
CVE-2015-1838
modules/serverdensitydevice.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...
CVE-2016-10119
Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges...
UBUNTU-CVE-2016-10120
Firejail uses 0777 permissions when mounting 1 /dev, 2 /dev/shm, 3 /var/tmp, or 4 /var/lock, which allows local users to gain privileges...
CVE-2015-1839
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...
CVE-2016-10119
Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges...
CVE-2016-10119
Firejail is affected by CVE-2016-10119: the vulnerability arises from Firejail mounting /tmp with 0777 permissions, enabling local privilege escalation. Affected component: Firejail; root cause: incorrect permissions on /tmp during mount. Impact: local users could gain privileges (as described). ...
CVE-2016-10119
Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges...
CVE-2016-10120
Firejail uses 0777 permissions when mounting 1 /dev, 2 /dev/shm, 3 /var/tmp, or 4 /var/lock, which allows local users to gain privileges...
CVE-2015-1838
The CVE-2015-1838 entry concerns SaltStack, specifically modules/serverdensity_device.py, with the flaw existing in SaltStack prior to version 2014.7.4 due to improper handling of files in /tmp. The vulnerability is documented in multiple feeds, including NVD (CVE-2015-1838) indicating a local, l...