Design/Logic Flaw

The EXT4IOCMOVEEXT aka move extents ioctl implementation in the ext4 filesystem in the Linux kernel before 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions...

CVE-2009-4131

The CVE refers to EXT4_IOC_MOVE_EXT (move extents) in the Linux kernel’s ext4 filesystem, where the ioctl allows local users to overwrite arbitrary files due to insufficient permission checks. Affected: ext4 subsystem on kernel versions prior to 2.6.32-git6. Impact: local privilege-related overwr...

RedHat Security Advisory RHSA-2009:1642

The remote host is missing updates announced in advisory RHSA-2009:1642. acpid is a daemon that dispatches ACPI Advanced Configuration and Power Interface events to user-space programs. It was discovered that acpid could create its log file /var/log/acpid with random permissions on some systems. ...

CVE-2009-4131

The EXT4IOCMOVEEXT aka move extents ioctl implementation in the ext4 filesystem in the Linux kernel before 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions...

DEBIAN-CVE-2009-3611

common/snapshots.py in Back In Time aka backintime 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared...

/proc Filesystem Directory Permission Bypass

Hi! This is forward from lkml, so no, I did not invent this hole. Unfortunately, I do not think lkml sees this as a security hole, so... Jamie Lokier said: a the current permission model under /proc/PID/fd has a security hole which Jamie is worried about I believe its bugtraq time. Being able to...

CVE-2009-3281

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

Code injection

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

CVE-2009-3281

Summary (CVE-2009-3281 / CVE-2009-3282 in VMware Fusion) VMware Fusion 2.0.5 and earlier are affected by two kernel issues in the vmx86 extension: CVE-2009-3281 (file-permission problem enabling arbitrary code execution in host kernel context by an unprivileged user) and CVE-2009-3282 (integer ov...

CVE-2009-3281

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

Mandriva Linux Security Advisory : samba (MDVSA-2009:277)

Multiple vulnerabilities has been found and corrected in samba : The SMB aka Samba subsystem in Apple Mac OS X 10.5.8, when Windows File Sharing is enabled, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and...

Quick Heal 10.00 SP1 - Local Privilege Escalation

Quick Heal 10.00 SP1 - Local Privilege Escalation ShineShadow Security Report 13102009-11 TITLE Quick Heal Local Privilege Escalation Vulnerability BACKGROUND Quick Heal Technologies is leading provider of AntiVirus and Internet Security tools and is leader in Anti-Virus Technology in India. A...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

HyperVM File Permissions Local Vulnerability

HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private Servers. There is a previously unreported vulnerability in HyperVM/Kloxo. It was originally documented in ISSUE 14 by an anonymous author: http://www.milw0rm.com/exploits/8880 It turns out th...

HyperVM File Permissions Local Vulnerability

No description provided by source. HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private Servers. There is a previously unreported vulnerability in HyperVM/Kloxo. It was originally documented in ISSUE 14 by an anonymous author:...

HyperVM - File Permissions Credential Disclosure

HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private Servers. There is a previously unreported vulnerability in HyperVM/Kloxo. It was originally documented in ISSUE 14 by an anonymous author: http://www.milw0rm.com/exploits/8880 It turns out th...

HyperVM - File Permissions Credential Disclosure

HyperVM - File Permissions Credential Disclosure HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private Servers. There is a previously unreported vulnerability in HyperVM/Kloxo. It was originally documented in ISSUE 14 by an anonymous author:...

HyperVM File Permissions Local Vulnerability

Exploit for multiple platform in category local exploits ============================================ HyperVM File Permissions Local Vulnerability ============================================ HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private...

[security bulletin] HPSBMA02448 SSRT061231 rev.1 - HP Network Node Manager (NNM) Remote Console Running on Windows, Local Execution of Arbitrary Code, Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01817357 Version: 1 HPSBMA02448 SSRT061231 rev.1 - HP Network Node Manager NNM Remote Console Running on Windows, Local Execution of Arbitrary Code, Denial of Service DoS NOTICE: The information ...

Design/Logic Flaw

The System Management/Repository component in IBM WebSphere Application Server WAS 7.0 before 7.0.0.5 on z/OS uses weak file permissions for new applications, which allows remote attackers to obtain sensitive information via unspecified vectors...