228 matches found
Davfs2, lvm-user: Insecure tempfile handling
Background Davfs2 is a file system driver that allows you to mount a WebDAV server as a local disk drive. lvm-user is a package providing userland utilities for LVM Logical Volume Management 1.x features. Description Florian Schilhabel from the Gentoo Linux Security Audit Team found that Davfs2...
lvm symbolic links
Incorrect temporary directory creation in lvmcreateinitrd и davfs2...
CVE-2004-0972
CVE-2004-0972 concerns the lvmcreate_initrd helper in the Trustix/ lvm package (lvm1) where a temporary-directory creation flaw enables a local attacker to perform a symlink-based overwrite of arbitrary files. The described root cause is insecure handling of temporary files by the script, allowin...
CVE-2004-0545
LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-0545
LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-0545
CVE-2004-0545 affects AIX 5.1 and 5.2 where the LVM component allows local users to overwrite arbitrary files via a symlink attack . The vulnerability is described as local-access, with the impact of potentially compromising file integrity via symlink tricks. Related Nessus entries for AIX 5.1/5....
CVE-2004-0544
The CVE-2004-0544 issue affects LVM on AIX 5.1/5.2, with multiple buffer overflows in putlvcb and getlvcb that enable local privilege escalation. Connected Nessus entries indicate vendor patches IY55681 (AIX 5.1) and IY55682 (AIX 5.2) to mitigate the vulnerability. Practically, systems running af...