Debian DSA-283-1 : xfsdump - insecure file creation

Ethan Benson discovered a problem in xfsdump, that contains administrative utilities for the XFS filesystem. When filesystem quotas are enabled xfsdump runs xfsdq to save the quota information into a file at the root of the filesystem being dumped. The manner in which this file is created is...

Mandrake Linux Security Advisory : xfsdump (MDKSA-2003:047)

A vulnerability was discovered in xfsdump by Ethan Benson related to filesystem quotas on the XFS filesystem. When xfsdump runs xfsdq to save the quota information into a file at the root of the filesystem being dumped, the file is created in an unsafe manner. A new option to xfsdq was added when...

CVE-2002-0356

CVE-2002-0356 concerns SGI IRIX affected by the fsr_xfs (XFS filesystem reorganizer) vulnerability. The issue allows a local user to gain root privileges by overwriting critical system files in IRIX 6.5.10 and earlier. SGI’s advisory notes this can lead to a root exploit, with a workaround and a ...

CVE-2002-0356

Vulnerability in XFS filesystem reorganizer fsrxfs in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files...

SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function

Overview The XFS journaling filesystem daemon uses a call to popen3 with unfiltered client-controlled input. This will lead to arbitrary command execution on remote systems. Description XFS is a 64-bit compliant journaling file system. The XFS journaling filesystem daemon xfsmd on SGI systems use...

CVE-2002-0356

Vulnerability in XFS filesystem reorganizer fsrxfs in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files...

IRIX XFS filesystem denial of service attack

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX XFS filesystem denial of service attack Number: 20020402-01-P Date: April 15, 2002 Reference: CAN-2002-0042 - ----------------------- - --- Issue Specifics --- - ----------------------- It has been reported that there is a...