4 matches found
GHSA-MJ6P-44CH-CQ69 mkdir: -m exposes directory with umask perms before chmod (race window)
The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory with umask-derived permissions typically 0755 before subsequently changing them to the requested mode via a separate chmod system call. In multi-user environments, this introduces ...
EUVD-2013-0255
Malware in sbrugna...
SUSE CVE-2013-0223
The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service segmentation fault and crash via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function...
GNU patch directory traversal vulnerability
The GNU Coreutils are the basic file, shell and text manipulation tools used by the GNU operating system. GNU patch suffers from a directory traversal vulnerability due to the program failing to properly handle file input. This allows an attacker to conduct a directory traversal attack to overwri...