CVE-2008-3294

src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended ownership and permissions, which allows local users to execute arbitrary code by modifying this file during a time window, or by creating it...

Oracle 8.1.5 安装漏洞

Oracle 8.1.5.0.1 for Linux安装程序会创建/tmp/orainstall目录，它被oracle:dba 拥有，权限设置为 711.在这个目录中它会创建一个名为orainstRoot.sh的shell脚本， 它的权限是777.然后，安装程序会停止，并提示你以root身份运行这个脚本。 这里存在的两个潜在的安全问题是： 1. 安装程序在往orainstRoot.sh写入的时候并不检查这个文件是否存在或是否是一个 链接文件，甚至不检查它是否被oracle用户拥有。因此一个攻击者可能用这个弱点来...

CVE-2008-2827

The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448 and CVE-2004-0452...

CVE-2008-2827

The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448 and CVE-2004-0452...

Design/Logic Flaw

The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448 and CVE-2004-0452...

CVE-2008-2827

The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448 and CVE-2004-0452...

CVE-2008-2827

The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448 and CVE-2004-0452...

CVE-2008-2827

CVE-2008-2827 involves the rmtree function in File::Path.pm of Perl 5.10. The description indicates a permissions check flaw before performing chmod, enabling local users to modify the permissions of arbitrary files via a symlink attack. This is a race-condition/permissions bug in the rmtree path...

RHEL 5 : bind (RHSA-2008:0300)

"Updated bind packages that fix two security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementatio...

Linux system how to view and modify the file read and write permissions-bug warning-the black bar safety net

View file permissions statement: In the terminal enter: ls-l xxx. xxx （xxx. xxx is the file name Then there will be similar information, mainly these: -rw-rw-r-- A total of 1 0 bit number Including: top that - represent the type The middle of that three rw - represent the owner（user） And then tha...

Denial of service

The utimensat system call sysutimensat in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIMENOW and UTIMEOMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service...

CVE-2008-2148

The utimensat system call sysutimensat in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIMENOW and UTIMEOMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service...

CVE-2008-2148

The utimensat system call sysutimensat in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIMENOW and UTIMEOMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service...

CVE-2008-2148

CVE-2008-2148 affects the Linux kernel: UTIME_NOW/UTIME_OMIT handling in sys_utimensat in 2.6.22 and older than 2.6.25.3 allows a local user to modify the timestamps of arbitrary files, potentially causing a denial of service. The root cause is improper permission checks for certain UTIME_NOW/UTI...

CVE-2008-0884

The Replace function in the capp-lspp-config script in the 1 lspp-eal4-config-ibm and 2 capp-lspp-eal4-config-hp packages before 0.65-2 in Red Hat Enterprise Linux RHEL 5 uses lstat instead of stat to determine the /etc/pam.d/system-auth file permissions, leading to a change to world-writable...

XWine WINE graphical interface multiple security vulnerabilities

Symbolic links problem on temporary files creation, weak configuration file permissions...

CVE-2008-0730

Solaris 10 is affected by CVE-2008-0730 via the locale input methods for Simplified Chinese, Traditional Chinese, Korean, and Thai. The vulnerable components create files/directories with weak permissions under .iiim/le and .Xlocale in user home directories, potentially allowing local users to re...

Debian Security Advisory DSA 846-1 (cpio)

The remote host is missing an update to cpio announced via advisory DSA 846-1. Two vulnerabilities have been discovered in cpio, a program to manage archives of files. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-1111 Imran Ghory discovered a race...

Debian Security Advisory DSA 730-1 (bzip2)

The remote host is missing an update to bzip2 announced via advisory DSA 730-1. OpenVAS Vulnerability Test $Id: deb7301.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 730-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1342-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...