CVE-2010-3540

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to ZFS...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to ZFS...

CVE-2010-3540

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to ZFS...

CVE-2010-3540

The connected Oracle CPU October 2010 documents identify CVE-2010-3540 as a Solaris 10/OpenSolaris vulnerability affecting ZFS. The flaw is listed as Local, with CVSS v2 base score 4.0 (Medium) and no remote/external access required. The vulnerability is categorized as a ZFS- related issue, affec...

CVE-2010-2392

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect integrity and availability, related to ZFS...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect integrity and availability, related to ZFS...

CVE-2010-2392

CVE-2010-2392 affects Oracle Solaris 10 and OpenSolaris, with the vulnerability in ZFS allowing local users to affect integrity and availability. The connected Oracle CPU July 2010 advisory lists CVE-2010-2392 under the Solaris section with ZFS as the affected component and Local access required ...

CVE-2010-2392

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect integrity and availability, related to ZFS...

Sun Solaris 10 filesystem rm(1),find(1),etc, Denial-of-service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sun Solaris 10 filesystem rm1,find1,etc, Denial-of-service Author: Maksymilian Arciemowicz SecurityReason.com Date: - - Dis.: 17.04.2010 - - Pub.: 21.05.2010 Affected Software: - - Sun Solaris 10 10/09 Original URL:...

Sun Solaris 10 filesystem rm(1),find(1),etc Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sun Solaris 10 filesystem rm1,find1,etc, Denial-of-service Author: Maksymilian Arciemowicz SecurityReason.com Date: - - Dis.: 17.04.2010 - - Pub.: 21.05.2010 Affected Software: - - Sun Solaris 10 10/09 Original URL:...

CVE-2010-0318

The replay functionality for ZFS Intent Log ZIL in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the original permissions, which might allow local users to read or modify unauthorized files in opportunistic circumstances...

Design/Logic Flaw

The replay functionality for ZFS Intent Log ZIL in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the original permissions, which might allow local users to read or modify unauthorized files in opportunistic circumstances...

CVE-2010-0318

The replay functionality for ZFS Intent Log ZIL in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the original permissions, which might allow local users to read or modify unauthorized files in opportunistic circumstances...

CVE-2010-0318

The CVE-2010-0318 issue affects FreeBSD 7.1, 7.2, and 8.0 where the ZFS Intent Log (ZIL) replay path, during setattr, creates new files with permissions 7777 instead of the original rights. This can allow local users to read or modify files after a crash or power failure in opportunistic circumst...

FreeBSD ZFS ZIL不安全文件权限漏洞

Bugraq ID: 37657 FreeBSD是一款基于BSD的操作系统。 FreeBSD ZFS存在安全漏洞，本地攻击者可以利用漏洞获得敏感信息或提升特权。 当重播setattr事务时，重播代码默认会以不安全的权限设置属性，当记录这些事务信息时没有再次更改这些属性。 系统崩溃或掉电等情况下会把部分文件以07777属性设置。这可导致获得敏感信息或提升特权。 FreeBSD FreeBSD 8.0-STABLE FreeBSD FreeBSD 8.0-RELEASE FreeBSD FreeBSD 7.2-STABLE FreeBSD FreeBSD 7.1-STABLE FreeBSD...

FreeBSD Security Advisory (FreeBSD-SA-10:03.zfs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:03.zfs.asc SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-10:03.zfs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:03.zfs.asc ADV FreeBSD-SA-10:03.zfs.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-10:03.zfs.asc Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Security Advisory FreeBSD-SA-10:03.zfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-10:03.zfs Security Advisory The FreeBSD Project Topic: ZFS ZIL playback with insecure permissions Category: contrib Module: zfs Announced: 2010-01-06 Credits: Paw...

FreeBSD -- ZFS ZIL playback with insecure permissions

Problem Description: When replaying setattr transaction, the replay code would set the attributes with certain insecure defaults, when the logged transaction did not touch these attributes...

FreeBSD-SA-10:03.zfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-10:03.zfs Security Advisory The FreeBSD Project Topic: ZFS ZIL playback with insecure permissions Category: contrib Module: zfs Announced: 2010-01-06 Credits:...