mysql: unsafe chmod/chown use in init script (CPU Jan 2017)

Multiple flaws were found in the way the MySQL init script handled initialization of the database data directory and permission setting on the error log file. The mysql operating system user could use these flaws to escalate their privileges to root...

CVE-2017-12189

It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handling which could result in local privilege escalation. This issue is a result of an incomplete fix for CVE-2016-8656...

CVE-2017-12189

It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handling which could result in local privilege escalation. This issue is a result of an incomplete fix for CVE-2016-8656...

CVE-2017-12189: Improper Ownership Management

It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handling which could result in local privilege escalation. This issue is a result of an incomplete fix for CVE-2016-8656...

PT-2018-5380

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform version 7.0.7.GA Description The issue is related to unsafe file handling in the jboss init script, which could lead to local privilege escalation. This problem arose from an incomplete fix for a...

jboss: unsafe chown of server.log in jboss init script allows privilege escalation (Incomplete fix for CVE-2016-8656)

It was discovered that the jboss init script performed unsafe file handling which could result in local privilege escalation...

jboss: unsafe chown of server.log in jboss init script allows privilege escalation (Incomplete fix for CVE-2016-8656)

It was discovered that the jboss init script performed unsafe file handling which could result in local privilege escalation...

jboss: unsafe chown of server.log in jboss init script allows privilege escalation (Incomplete fix for CVE-2016-8656)

It was discovered that the jboss init script performed unsafe file handling which could result in local privilege escalation...

jboss: unsafe chown of server.log in jboss init script allows privilege escalation (Incomplete fix for CVE-2016-8656)

It was discovered that the jboss init script performed unsafe file handling which could result in local privilege escalation...

jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation

It was discovered that the jboss init script performed unsafe file handling which could result in local privilege escalation...

jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation

It was discovered that the jboss init script performed unsafe file handling which could result in local privilege escalation...

jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation

It was discovered that the jboss init script performed unsafe file handling which could result in local privilege escalation...

SUSE-SU-2017:3107-1 Security update for postgresql-init

This update for postgresql-init fixes the following issues: - CVE-2017-14798: A race condition in the init script could be used by attackers able to access the postgresql account to escalate their privileges to root bsc1062722...

PT-2018-5718

Name of the Vulnerable Software and Affected Versions: postgresql affected versions not specified Description: A race condition in the postgresql init script could allow attackers with access to the postgresql account to escalate their privileges to root. Recommendations: At the moment, there is ...

GLSA-201711-11 : VDE: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201711-11 VDE: Privilege escalation It was discovered that Gentoos default VDE installation suffered from a privilege escalation vulnerability in the init script. This script calls an unsafe chown command which gives members from...

CVE-2016-10089

A vulnerability was found in Nagios 4.2.4, and earlier, which allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641. Mitigation This flaw, and others like it, are mitigated by enabling hardlink and symlink protections. These...

Gentoo app-admin/logstash-bin Package Privilege Gain Vulnerability

The Gentoo app-admin/logstash-bin package is a user management package from the Gentoo Foundation. A security vulnerability exists in the Gentoo app-admin/logstash-bin package in versions 5.6.x prior to 5.6.1 and versions prior to 5.5.3. A local attacker can exploit this vulnerability to gain...

CVE-2017-14730

The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has "chown -R" calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to a $LSUSER account for creation of a hard link...

PT-2017-13657

Name of the Vulnerable Software and Affected Versions logstash-bin versions prior to 5.5.3 logstash-bin versions 5.6.x prior to 5.6.1 Description The issue allows local users to gain privileges by creating a hard link in a user-writable directory tree. This is due to the init script having "chown...

CVE-2017-14730: Incorrect Permission Assignment for Critical Resource

The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has "chown -R" calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to a $LSUSER account for creation of a hard link...