572 matches found
Linux: SSH /etc/ssh/sshd_config chown
The /etc/ssh/sshdconfig file contains configuration specifications for sshd. This should be protected from unauthorized changes by non-privileged users. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...
EulerOS 2.0 SP3 : coreutils (EulerOS-SA-2019-2563)
According to the version of the coreutils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSI...
EulerOS 2.0 SP2 : coreutils (EulerOS-SA-2019-2417)
According to the version of the coreutils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSI...
EulerOS Virtualization for ARM 64 3.0.3.0 : coreutils (EulerOS-SA-2019-2333)
According to the version of the coreutils packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a...
PT-2019-15755
Name of the Vulnerable Software and Affected Versions TitanHQ WebTitan versions prior to 5.18 Description An issue was discovered that allows low-privilege users to execute a number of commands as root, including mv, chown, and chmod, which can be exploited to gain root privileges by an attacker...
DEBIAN-CVE-2019-19191
Shibboleth Service Provider SP 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user the shibd account after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow...
CVE-2019-19191
Shibboleth Service Provider SP 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user the shibd account after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow...
CVE-2019-19191
Shibboleth Service Provider SP 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user the shibd account after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow...
CVE-2019-19191
Shibboleth Service Provider SP 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user the shibd account after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow...
PT-2019-15778
Name of the Vulnerable Software and Affected Versions Shibboleth Service Provider SP versions 3.x before 3.1.0 Description The issue allows a user to escalate to root by pointing symlinks to sensitive files, such as /etc/shadow, due to a spec file that calls chown on files in a directory controll...
CVE-2019-19191: Improper Link Resolution Before File Access
Shibboleth Service Provider SP 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user the shibd account after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow...
EulerOS 2.0 SP5 : coreutils (EulerOS-SA-2019-2134)
According to the version of the coreutils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSI...
UBUNTU-CVE-2019-15538
An issue was discovered in xfssetattrnonsize in fs/xfs/xfsiops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfssetattrnonsize is failing to unlock the ILOCK after the xfsqmvopchownreserve call fails. This is primarily a local...
CVE-2016-10775
cPanel before 60.0.25 allows arbitrary file-chown operations via reassignpostterminatecruft SEC-173...
CVE-2016-10775
cPanel before 60.0.25 allows arbitrary file-chown operations via reassignpostterminatecruft SEC-173...
Code injection
cPanel before 60.0.25 allows arbitrary file-chown operations via reassignpostterminatecruft SEC-173...
CVE-2016-10775
CVE-2016-10775 affects cPanel prior to 60.0.25. The vulnerability allows arbitrary file ownership changes via reassign_post_terminate_cruft (SEC-173), with impact described as high confidentiality risk and no reported impact to availability. Public details across sources consistently identify the...
CVE-2016-10775
cPanel before 60.0.25 allows arbitrary file-chown operations via reassignpostterminatecruft SEC-173...
PT-2019-7571
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 60.0.25 Description The issue allows arbitrary file-chown operations via the reassign post terminate cruft function. Recommendations For versions prior to 60.0.25, update to version 60.0.25 or later to resolve the issu...