CVE-2018-18332

A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installations...

CVE-2018-18331: Incorrect Permission Assignment for Critical Resource

A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other exploits on vulnerable installations...

CVE-2018-18332: Incorrect Permission Assignment for Critical Resource

A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installations...

CVE-2018-18093

Improper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gain privileged access via local access...

Input validation

Improper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gain privileged access via local access...

CVE-2018-18093

Intel VTune Amplifier 2018 for Windows (Update 3 and earlier) contains an elevation of privilege vulnerability due to improper installer file permissions, allowing a local unprivileged user to potentially gain privileged access. Intel’s advisory INTEL-SA-00194 confirms the issue and advises updat...

Linux - userfaultfd Bypasses tmpfs File Permissions Exploit

Using the userfaultfd API, it is possible to first register a userfaultfd region for any VMA that fulfills vmacanuserfault: It must be an anonymous VMA -vmops==NULL, a hugetlb VMA VMHUGETLB, or a shmem VMA -vmops==shmemvmops. This means that it is, for example, possible to register userfaulfd...

Linux - 'userfaultfd' Bypasses tmpfs File Permissions

Using the userfaultfd API, it is possible to first register a userfaultfd region for any VMA that fulfills vmacanuserfault: It must be an anonymous VMA -vmops==NULL, a hugetlb VMA VMHUGETLB, or a shmem VMA -vmops==shmemvmops. This means that it is, for example, possible to register userfaulfd...

Linux userfaultfd tmpfs File Permission Bypass

Linux: userfaultfd bypasses tmpfs file permissions CVE-2018-18397 Using the userfaultfd API, it is possible to first register a userfaultfd region for any VMA that fulfills vmacanuserfault: It must be an anonymous VMA -vmops==NULL, a hugetlb VMA VMHUGETLB, or a shmem VMA -vmops==shmemvmops. This...

Intel® Solid State Drive Toolbox File Permissions Advisory

Summary: A potential security vulnerability in Intel® Solid State Drive Toolbox may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-18097 Description: Improper directory permissions in IntelR Solid...

Intel® VTune Amplifier 2018 for Windows* Update 3 Advisoy

Summary: A potential security vulnerability in Intel® VTune Amplifier 2018 for Windows may allow Escalation of Privilege. Intel is releasing VTune Amplifier updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-18093 Description: Improper file permissions in the...

ghostscript: .tempfile file permission issues (699657)

It was discovered that the ghostscript .tempfile function did not properly handle file permissions. An attacker could possibly exploit this to exploit this to bypass the -dSAFER protection and delete files or disclose their content via a specially crafted PostScript document...

CVE-2017-1418

IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9 has insecure permissions on certain files. A local attacker could exploit this vulnerability to modify or delete these files with an unknown impact. IBM X-Force ID: 127406...

CVE-2017-1418

IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9 has insecure permissions on certain files. A local attacker could exploit this vulnerability to modify or delete these files with an unknown impact. IBM X-Force ID: 127406...

Input validation

Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access...

CVE-2018-3698

Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access...

CVE-2018-3698

CVE-2018-3698 concerns Intel® Ready Mode Technology. The vulnerability stems from improper file permissions in the installer, which could allow an unprivileged local user to escalate privileges. Affected product: Intel Ready Mode Technology (all versions per advisory). Underlying cause: insecure ...

CVE-2018-3698

Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access...

CVE-2018-3698: Undefined Security Weakness

Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access...

Intel® Ready Mode Technology File Permissions Advisory

Summary: A potential security vulnerability in the Intel® Ready Mode Technology may allow for escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation notice for Intel® Ready Mode Technology. Vulnerability Details:...