PT-2018-12978

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM client versions prior to 7.1.7.2 for Linux and macOS Description The issue allows an unprivileged user to potentially gain ownership of files owned by root on the local client host due to a race condition in the svpn component...

CVE-2018-5546

CVE-2018-5546 affects the F5 BIG-IP APM client svpn and policyserver components on Linux and macOS. The vulnerability arises because these components run with elevated privileges on the local host, allowing a local unprivileged user to gain ownership of root-owned files, potentially disclose sens...

CVE-2018-5546

The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of...

CVE-2016-9485: Creation of Temporary File With Insecure Permissions

On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality of the agent. The typical configuration is for the agent to run as a Windows service under the local SYSTEM account. The SecureConnector...

CVE-2018-10380

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

Design/Logic Flaw

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

DEBIAN-CVE-2018-10380

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

CVE-2018-10380

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

CVE-2018-10380: Improper Link Resolution Before File Access

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

CVE-2017-18240

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL when the service is...

CVE-2017-18240

The CVE affects Gentoo’s app-admin/collectd prior to 5.7.2-r1. The root cause is that the PID file directory ownership is set to the collectd account, enabling a local attacker to kill arbitrary processes by modifying the PID directory before a root SIGKILL. Impact is local privilege/denial of se...

PT-2018-10922

Name of the Vulnerable Software and Affected Versions Spring Boot versions 1.5.9 and earlier Spring Boot versions 2.0.0.M1 through 2.0.0.M7 Description The issue allows the run user to overwrite and take ownership of any file on the same system due to a symlink attack. This can happen when the...

ABRT - raceabrt Privilege Escalation Exploit

Exploit for linux platform in category local exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ABRT raceabrt Privilege Escalation', 'Description' = %q This module attempts to gain root...

ABRT raceabrt Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ABRT raceabrt Privilege Escalation', 'Description' = %q This module attempts to gain root privileges on Fedora systems with a vulnerable version ...

CVE-2017-18188

CVE-2017-18188 affects OpenRC opentmpfiles up to version 0.1.3. When the fs.protected_hardlinks sysctl is disabled, local users can cause a file ownership change by creating a hard link inside a directory that will later be processed by a recursive chown -R. The root cause is the interaction betw...

PT-2018-6719

Name of the Vulnerable Software and Affected Versions: OpenRC opentmpfiles versions 0.1.3 and earlier Description: The issue allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which "chown -R" will be run, when the fs.protected hardlinks sysctl...

CVE-2017-18188: Improper Link Resolution Before File Access

OpenRC opentmpfiles through 0.1.3, when the fs.protectedhardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which "chown -R" will be run...

CVE-2018-6954

systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. Th...

CVE-2018-6954

systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. Th...

CVE-2018-6954

systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. Th...