CVE-2008-2148

The utimensat system call sysutimensat in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIMENOW and UTIMEOMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service...

CVE-2008-2148

CVE-2008-2148 affects the Linux kernel: UTIME_NOW/UTIME_OMIT handling in sys_utimensat in 2.6.22 and older than 2.6.25.3 allows a local user to modify the timestamps of arbitrary files, potentially causing a denial of service. The root cause is improper permission checks for certain UTIME_NOW/UTI...

CVE-2008-0884

The Replace function in the capp-lspp-config script in the 1 lspp-eal4-config-ibm and 2 capp-lspp-eal4-config-hp packages before 0.65-2 in Red Hat Enterprise Linux RHEL 5 uses lstat instead of stat to determine the /etc/pam.d/system-auth file permissions, leading to a change to world-writable...

XWine WINE graphical interface multiple security vulnerabilities

Symbolic links problem on temporary files creation, weak configuration file permissions...

CVE-2008-0730

Solaris 10 is affected by CVE-2008-0730 via the locale input methods for Simplified Chinese, Traditional Chinese, Korean, and Thai. The vulnerable components create files/directories with weak permissions under .iiim/le and .Xlocale in user home directories, potentially allowing local users to re...

Debian: Security Advisory (DSA-1342-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1342-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-730-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 846-1 (cpio)

The remote host is missing an update to cpio announced via advisory DSA 846-1. Two vulnerabilities have been discovered in cpio, a program to manage archives of files. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-1111 Imran Ghory discovered a race...

Debian Security Advisory DSA 730-1 (bzip2)

The remote host is missing an update to bzip2 announced via advisory DSA 730-1. OpenVAS Vulnerability Test $Id: deb7301.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 730-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-6594

IBM Lotus Notes 8 for Linux before 8.0.1 uses 1 unspecified weak permissions for the installation kit obtained through a Notes 8 download and 2 0777 permissions for the installdata file that is created by setup.sh, which allows local users to gain privileges via a Trojan horse file...

[CVE-2007-5342] Apache Tomcat's default security policy is too open

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-5342: Tomcat's default security policy is too open Severity: Low Vendor: The Apache Software Foundation Versions Affected: Tomcat 5.5.9 to 5.5.25 Tomcat 6.0.0 to 6.0.15 Description: The JULI logging component allows web applications to provid...

Race condition

Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information...

Shadow Utils useradd utility sets incorrect file permissions

Overview The Shadow Utilities contain a vulnerability that may result in new user mailboxes having arbitrary permissions. Description The Shadow Utilities provide tools to manage user accounts.When a new mailbox is created using the useradd utility, the open function does not receive the expected...

SuSE 10 Security Update : clamav (ZYPP Patch Number 3758)

This update of ClamAV fixes several security bugs. - wrong calculation of buffer-end - use strict permissions for temporary files - heap corruption causing denial-of-service with corrupted rar archive - detect block list loop %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text descripti...

CVE-2002-2407

CVE-2002-2407 concerns QNX Neutrino RTOS 6.2.0 patches that incorrectly set insecure permissions on a set of binaries (e.g., /sbin/io-audio, /bin/shutdown, /sbin/fs-pkg, phshutdown, plus game binaries in pack 2.0.3). The issue enables local users to gain privileges by modifying these files before...

Serious holes affecting SiteBar 3.3.8

All, As a result of a short security audit of SiteBar, a number of security holes were found. The holes included code execution, a malicious redirect and multiple cases of Javascript injection. After liasing with the developers, the holes have been patched. Attached are the advisory and patch...

GLSA-200710-11 : X Font Server: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200710-11 X Font Server: Multiple Vulnerabilities iDefense reported that the xfs init script does not correctly handle a race condition when setting permissions of a temporary file CVE-2007-3103. Sean Larsson discovered an integer...

CVE-2002-2242

The CVE-2002-2242 entry concerns the Apple Package Manager in KisMAC 0.02a and earlier, which modifies file permissions of sensitive files after installation. This behavior could enable attackers to perform unauthorized activities on those files. The connected documents confirm the affected softw...

CVE-2002-2242

The Apple Package Manager in KisMAC 0.02a and earlier modifies file permissions of sensitive files after installation, which could allow attackers to conduct unauthorized activities on those files...