PT-2014-3251

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions prior to Grizzly 2013.1.4 and Havana 2013.2.1 Description The issue allows local users to read and modify live snapshots due to world-writable and world-readable permissions for the temporary directory used to...

CVE-2013-6282

The 1 getuser and 2 putuser API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against...

DEBIAN-CVE-2013-4956

Puppet Module Tool PMT, as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, installs modules with weak permissions if those permissions were used when the modules were originally built, which might allow local users to rea...

CVE-2013-1836

Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not properly manage privileges for WebDAV repositories, which allows remote authenticated users to read, modify, or delete arbitrary site-wide repositories by leveraging certain read access...

PT-2013-2878

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices versions 7.0 through 7.0.235.3 Cisco Wireless LAN Controller WLC devices versions 7.1 through 7.2.111.3 Cisco Wireless LAN Controller WLC devices versions 7.3 through 7.3.101.0 Description The issue...

PT-2012-3922

Name of the Vulnerable Software and Affected Versions Iomega Home Media Network Hard Drive with EMC Lifeline firmware versions prior to 2.104 Iomega Home Media Network Hard Drive Cloud Edition with EMC Lifeline firmware versions prior to 3.2.3.15290 Iomega iConnect with EMC Lifeline firmware...

DEBIAN-CVE-2010-3707

plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving...

CVE-2010-2022

jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations...

CVE-2002-0664: Undefined Security Weakness

The default Access Control Lists ACLs of the administration database for ZMerge 4.x and 5.x provides arbitrary users including anonymous users with Manager level access, which allows the users to read or modify import/export scripts...

CVE-2000-0269: Undefined Security Weakness

Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess...