PT-2019-6663

Name of the Vulnerable Software and Affected Versions Ubuntu SELinux initscript versions prior to 1:0.10 Description The issue arises from the Ubuntu SELinux initscript creating a lockfile in a world-writable directory using the touch command. If the OS kernel lacks symlink protections, an attack...

CVE-2011-3151: Protection Mechanism Failure

The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem...