CVE-2005-1774

The CVE-2005-1774 entry concerns WEB-DAV Linux File System (davfs2) 0.2.3, where improper enforcement of Unix permissions allows local users to write arbitrary files on a davfs2 mounted filesystem. Multiple connected sources describe the issue as a permission enforcement flaw in davfs2, specifica...

CVE-2005-1774

WEB-DAV Linux File System davfs2 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem...

CVE-2005-1774

WEB-DAV Linux File System davfs2 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem...

CVE-2005-1774

WEB-DAV Linux File System davfs2 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem...

DEBIAN-CVE-2005-1774

WEB-DAV Linux File System davfs2 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem...

PT-2005-2742 · Linux +1 · Davfs2 +1

Name of the Vulnerable Software and Affected Versions: davfs2 version 0.2.3 Description: The issue is related to the improper enforcement of Unix permissions in the WEB-DAV Linux File System davfs2, allowing local users to write arbitrary files on a davfs2 mounted filesystem. Recommendations: For...

davfs2 does not honour Unix permissions

davfs2 is a user-space tool to mount DAV resources into the Unix directory tree, using the Coda kernel filesystem as a backplane. Unfortunately, Andrew Pimlott discovered that such a mounted filesystem does not honour the Unix permissions that stat presents. Details are here:...

newsgrab -- directory traversal vulnerability

The newsgrab script creates files by using the names provided in the newsgroup messages in a perl open call. This is done without performing any security checks to prevent a directory traversal. A specially crafted newsgroup message could cause newsgrab to drop an attachment anywhere on the file...