Design/Logic Flaw

Huawei Seco Versatile Security Manager VSM before V200R002C00SPC300 allows remote authenticated users to gain privileges via a certain change to a group configuration setting...

CVE-2013-4633: Undefined Security Weakness

Huawei Seco Versatile Security Manager VSM before V200R002C00SPC300 allows remote authenticated users to gain privileges via a certain change to a group configuration setting...

PT-2013-5112

Name of the Vulnerable Software and Affected Versions Huawei Seco Versatile Security Manager VSM versions prior to V200R002C00SPC300 Description The issue allows remote authenticated users to gain privileges via a certain change to a group configuration setting. Recommendations For versions prior...

CVE-2011-1006

Heap-based buffer overflow in the parsecgroupspec function in tools/tools-common.c in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear wheth...

CVE-2011-1022

The cgrereceivenetlinkmsg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted...

CVE-2011-1006

Heap-based buffer overflow in the parsecgroupspec function in tools/tools-common.c in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear wheth...

Heap overflow

Heap-based buffer overflow in the parsecgroupspec function in tools/tools-common.c in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear wheth...

CVE-2011-1022

The cgrereceivenetlinkmsg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted...

CVE-2011-1006

Heap-based buffer overflow in the parsecgroupspec function in tools/tools-common.c in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear wheth...

CVE-2011-1006

CVE-2011-1006 refers to a heap-based buffer overflow in libcgroup/libcg, specifically in parse_cgroup_spec() within tools/tools-common.c. The flaw arises when parsing a crafted list of controllers on the command line, which could allow local users to gain privileges. The vulnerability is linked t...

CVE-2011-1006

Heap-based buffer overflow in the parsecgroupspec function in tools/tools-common.c in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear wheth...

CVE-2011-1006: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the parsecgroupspec function in tools/tools-common.c in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear wheth...

CVE-2011-0010

check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command...

Default configuration

Tor before 0.2.0.32 does not properly process the 1 User and 2 Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process...

CVE-2008-5397

Tor before 0.2.0.32 does not properly process the 1 User and 2 Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process...

CVE-2008-5397: Undefined Security Weakness

Tor before 0.2.0.32 does not properly process the 1 User and 2 Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process...