Moderate: Red Hat Security Advisory: instack-undercloud security update

An update for instack-undercloud is now available for Red Hat OpenStack Platform 9.0 Mitaka director. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

php-fpm Arbitrary File Creation Vulnerability

php-fpm is a PHPFastCGI process manager for PHP. A security vulnerability exists in php-fpm. A local attacker can exploit this vulnerability to perform a symbolic link attack, write to arbitrary files or create arbitrary files...

Openstack DBaaS Configuration File Write Vulnerability

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration NASA and Rackspace, Inc. in the U.S. Openstack DBaaS is one of the database service tools. A security vulnerability exists in Openstack DBaaS aka Trove in versions prior to Openstack...

Debian cron package elevation of privilege vulnerability

Debian is a free operating system with a Linux or FreeBSD kernel created by the Debian Project Collaboration. ubuntu is an open source GNU/Linux operating system. cron package is one of the scheduling daemon installers. An elevation of privilege vulnerability exists in cron package 3.0pl1-128 and...

CISOfy Lynis Local Elevation of Privilege Vulnerability

Lynis is an open source system security auditing tool developed by software developer Michael Boelen. The tool consists of a series of shell scripts that detect installed packages, configuration errors, and security issues and system information on the system. A local elevation of privilege...

Remote Code Execution (RCE)

github.com/docker/docker is vulnerable to arbitrary file writes and remote code execution RCE. Attackers can perform these attacks using a hard link image attack in an image archive or through a symlink attack...

Hardcoded credentials

Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641...

CVE-2016-10089

Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641...

CVE-2016-10089

Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641...

CVE-2016-10089

Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641...

CVE-2016-10089

Technical details are not publicly available in the provided documents.

CVE-2016-10089

Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641...

CVE-2016-9595

A flaw was found in katello-debug where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files...

Malware Information Sharing Platform Insecure Temporary File Creation Vulnerability

The Malware Information Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and analyzing cybersecurity events and malware. A security vulnerability exists in the app/Controller/TemplatesController.php file in MISP...

CVE-2016-5847

SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security Note 2327384...

CVE-2016-5847

SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security Note 2327384...

CVE-2016-5847

CVE-2016-5847 describes a local privilege-escalation in SAPCAR (SAPCAR archive tool) caused by a TOCTOU race condition when changing permissions of extracted files. A local attacker who can place files in the extraction directory can replace an extracted file with a hard link to another user’s fi...

The vulnerability of PHP software allows a malicious individual to compromise the integrity and accessibility of protected information.

The vulnerability in acinclude.m4, which is used in the PHP configuration script, allows a local user to replace arbitrary files by using an attack on the /tmp/phpglibccheck file, with symbolic links...

Amazon Linux AMI : sos (ALAS-2016-666)

An insecure temporary file use flaw was found in the way sos created certain sosreport files. A local attacker could possibly use this flaw to perform a symbolic link attack to reveal the contents of sosreport files, or in some cases modify arbitrary files and escalate their privileges on the...

CentOS Update for sos CESA-2016:0188 centos7

Check the version of sos SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882393";...