Cisco IOS XR File Permissions

The vulnerability of Cisco IOS XR operating systems lies in the lack of control over public write permissions for installed application files. Exploiting this vulnerability can allow a perpetrator to circumvent existing security restrictions...

Aurora Validation Write Privilege Escalation

The vulnerability of the validation component of the “Aurora” operating system is related to the lack of control over public rights to write the files that are installed by applications. Exploiting this vulnerability can lead to violations of data confidentiality, integrity, and accessibility...

A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

...