34 matches found
CVE-2026-123962
In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorizedkeys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories...
DEBIAN-CVE-2026-123962
In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorizedkeys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories...
CVE-2026-123962
In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorizedkeys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories...
EUVD-2026-118380
In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorizedkeys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories...
CVE-2026-123962
In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorizedkeys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories...
CVE-2026-123962
In FreedomBox versions prior to 26.15 , unprivileged user accounts can perform unauthorized read and write operations on files they lack permissions for. The root cause is a symlink vulnerability (CWE-61) where a user can set the authorized_keys file as a symbolic link. No specific exploit code o...
Linux Distros Unpatched Vulnerability : CVE-2026-123962
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorizedkeys file to be a symlink...
CVE-2025-68462
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases...
EUVD-2025-204034
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases...
CVE-2025-68462
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases...
UBUNTU-CVE-2025-68462
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases...
CVE-2025-68462
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases...
CVE-2025-68462
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases...
CVE-2025-68462
CVE-2025-68462 affects Freedombox prior to 25.17.1. The vulnerability arises from improper permissions on the backups-data directory, which can allow reading of database dump files stored there. The CVSS baseline indicates a local attack with high complexity and no privileges required, yielding a...
CVE-2025-68462
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases...
PT-2025-51993
Name of the Vulnerable Software and Affected Versions Freedombox versions prior to 25.17.1 Description Freedombox versions prior to 25.17.1 do not establish appropriate permissions for the backups-data directory. This allows unauthorized access to database dump files. Recommendations Update to...
Freedombox security vulnerabilities
Freedombox is a Debian-based freeware home server operating system. A security vulnerability exists in Freedombox versions prior to 25.17.1 that stems from improperly set permissions on the backup data directory, which could result in database dump files being read...
CVE-2025-68462: Incorrect Permission Assignment for Critical Resource
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases...
Linux Distros Unpatched Vulnerability : CVE-2025-68462
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases. CVE-2025-68462 Note...