google-osconfig-privesc

요약 googleosconfigagent 프로세스는 GoogleCloudPlatformhttps://github.com/GoogleCloudPlatform/osconfig의 구성 요소로, 각 VM에서 기본적으로 실행되는 도구입니다. 에이전트는 root로 실행되며 사용자가 제어할 수 있는 일부 서비스를 담당하며, OS confighttps://cloud.google.com/compute/docs/os-config-management를 포함합니다. 이는 Google의 폴링 기반 원하는 상태 구성의 일종입니다. 이 저장소는 제가...

Insecure Temporary File

Overview linuxfabrik-lib is a Python libraries used in various Linuxfabrik projects, including the 'Linuxfabrik Monitoring Plugins' project. Affected versions of this package are vulnerable to Insecure Temporary File in the process that creates SQLite databases at predictable paths in /tmp. An...

CVE-2022-27772

spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. NOTE: This vulnerability only affects products and/or versions that...

Fedora 23 : arts-1.5.10-30.fc23 (2015-6d473c95ee)

Security fix for CVE-2015-7543 in arts the legacy aRts sound server: A temporary directory was being created insecurely using mktemp and mkdir, allowing an attacker to hijack the temporary directory and thus the inter- process communication IPC. This update fixes the temporary directory creation ...

Gambas /tmp Directory Hijack

Gambas Directory hijack vulnerability The gambas software package creates a directory in tmp to work from without verifying another user hasn't already created it. This allows a local user to hijack ownership. Describe the problem. Gambas creates a directory in /tmp called gambas.UID where UID is...