CVE-2016-10089

Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641...

CVE-2016-10089

Technical details are not publicly available in the provided documents.

CVE-2016-10089

Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641...

libarchive security update

2.8.3-7 - Fixes variation of CVE-2016-5418: Hard links could include '..' in their path. 2.8.3-6 - Fixes CVE-2016-5418: Archive Entry with type 1 hardlink causes file overwrite 1365774 2.8.3-5 - enable testsuite - CVE batch in summer 2016...

CVE-2016-5847

SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security Note 2327384...

CVE-2016-5847

CVE-2016-5847 describes a local privilege-escalation in SAPCAR (SAPCAR archive tool) caused by a TOCTOU race condition when changing permissions of extracted files. A local attacker who can place files in the extraction directory can replace an extracted file with a hard link to another user’s fi...

CVE-2016-5847

SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security Note 2327384...

CVE-2016-5253

The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link...

CVE-2016-5253

The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link...

CVE-2016-5253

The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link...

CVE-2016-5253

Mozilla Firefox updater on Windows (pre-48.0) is affected. The Updater can be abused via the callback application-path parameter and a hard link to write arbitrary files (local privilege escalation). A fix is to upgrade to Firefox 48.0 or later; apply vendor advisories for the exact patched versi...

CVE-2016-5253

The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link...

CVE-2016-5253

The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link...

CVE-2013-6799

Apple Mac OS X 10.9 allows local users to cause a denial of service memory corruption or panic by creating a hard link to a directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0105...

Apport Denial of Service Vulnerability

Apport is a toolkit for Ubuntu that collects and gives feedback on error messages information that the operating system finds useful when an application crashes. A denial-of-service vulnerability exists in versions prior to Apport 2.19, which allows local users to cause a denial of service or...

CVE-2015-1338

kernelcrashdump in Apport before 2.19 allows local users to cause a denial of service disk consumption or possibly gain privileges via a 1 symlink or 2 hard link attack on /var/crash/vmcore.log...

Hardcoded credentials

kernelcrashdump in Apport before 2.19 allows local users to cause a denial of service disk consumption or possibly gain privileges via a 1 symlink or 2 hard link attack on /var/crash/vmcore.log...

CVE-2015-1338

kernelcrashdump in Apport before 2.19 allows local users to cause a denial of service disk consumption or possibly gain privileges via a 1 symlink or 2 hard link attack on /var/crash/vmcore.log...

CVE-2015-1338

CVE-2015-1338 affects the Apport crash-dump handling in Linux environments (kernel_crashdump) prior to version 2.19. A local attacker could exploit insecure crash dump file handling to cause a denial of service via disk consumption or potentially elevate privileges through symlink or hard link at...

CVE-2015-1338

kernelcrashdump in Apport before 2.19 allows local users to cause a denial of service disk consumption or possibly gain privileges via a 1 symlink or 2 hard link attack on /var/crash/vmcore.log...