Design/Logic Flaw

Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations...

Design/Logic Flaw

The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an "Apply to enclosed items" action, which allows local users to bypass intended access restrictions via normal filesystem operations...

Code injection

jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations...

CVE-2010-2022

The CVE-2010-2022 issue affects FreeBSD jail(8) in FreeBSD 8.0 and 8.1-PRERELEASE. If the jail is started without the -l -U root options, jail(8) may fail to chdir to a restricted directory, allowing local users to access the current working directory and potentially read, modify, or create arbit...

CVE-2010-0728

smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAPDACOVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client...