PT-2005-2742 · Linux +1 · Davfs2 +1

Name of the Vulnerable Software and Affected Versions: davfs2 version 0.2.3 Description: The issue is related to the improper enforcement of Unix permissions in the WEB-DAV Linux File System davfs2, allowing local users to write arbitrary files on a davfs2 mounted filesystem. Recommendations: For...

davfs2 does not honour Unix permissions

davfs2 is a user-space tool to mount DAV resources into the Unix directory tree, using the Coda kernel filesystem as a backplane. Unfortunately, Andrew Pimlott discovered that such a mounted filesystem does not honour the Unix permissions that stat presents. Details are here:...

newsgrab -- directory traversal vulnerability

The newsgrab script creates files by using the names provided in the newsgroup messages in a perl open call. This is done without performing any security checks to prevent a directory traversal. A specially crafted newsgroup message could cause newsgrab to drop an attachment anywhere on the file...