kernel: open() call allows setgid bit when user is not in new file's group

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...

CVE-2008-4210

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...

Linux Kernel 'truncate()'本地特权提升漏洞

BUGTRAQ ID: 31368 CVE ID：CVE-2008-4210 CNCVE ID：CNCVE-20084210 Linux是一款开放源代码的操作系统。 Linux内核'truncate'和'ftruncate'函数存在设计错误，本地攻击者可以利用漏洞提升特权。 当建立文件时，open/creat允许通过模式参数设置setgid位，由于bsdgroups mount选项或在setgid目录中建立文件，用户不属于新文件的组的成员。用户可以使用ftruncate和memory-mapped I/O使新文件成为任意两进制，获得此组的特权，原因是这些操作没有清除setgid位。...

[SECURITY] [DSA 1565-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1565-1 [email protected] http://www.debian.org/security/ dann frazier May 1, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-1565-1 linux-2.6 - several vulnerabilities

Bulletin has no description...

CVE-2007-5544

IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions Everyone:Full Control for memory mapped files shared memory in IPC, which allows local users to obtain sensitive information, or inject Lotus Script or other character...

IBM Lotus Notes / Domino Client Memory Mapped Files Privilege Escalation

The version of Lotus Notes installed on the remote Windows host fails to adequately protect certain memory mapped files used by the application for inter-process communications. In a shared user environment, a local user may be able to leverage this issue to read from these files, leading to...

IBM Lotus Notes multiple security vulnerabilities

Buffer overflow on viewing of different attachment types, information leak between local users thorugh memory mapped files...

SYMSA-2007-013: Lotus Notes Memory Mapped Files Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-013 Advisory Title: Lotus Notes Memory Mapped Files Vulnerability Author: Ollie Whitehouse / [email protected] Release Date: 23-10-20...

security flaw

Linux kernel before 2.6.13 allows local users to cause a denial of service crash via a dio transfer from the sg driver to memory mapped mmap IO space...

AIX 5.2 : IY46784

The remote host is missing AIX Critical Security Patch number IY46784 Possible data error using memory mapped I/O in cachefs. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

RHEL 2.1 : kernel (RHSA-2003:147)

These updated kernel packages address security vulnerabilites, including two possible data corruption scenarios. In addition, a number of drivers have been updated, improvements made to system performance, and various issues have been resolved. The Linux kernel handles the basic functions of the...

(RHSA-2003:147) kernel security update

The Linux kernel handles the basic functions of the operating system. Two potential data corruption scenarios have been identified. These scenarios can occur under heavy, complex I/O loads. The first scenario only occurs while performing memory mapped file I/O, where the file is simultaneously...

CVE-2000-0006

strace allows local users to read arbitrary files via memory mapped file names...

CVE-2000-0006

CVE-2000-0006 affects the strace utility. The issue allows local users to read arbitrary files via memory-mapped file names. The connected records identify strace as the affected component and describe the vulnerability as a local-read exposure through mmap-based file-name handling. No explicit e...

CVE-2000-0006

strace allows local users to read arbitrary files via memory mapped file names...

AZL-35286 CVE-2000-0006 affecting package strace 6.8-1

strace allows local users to read arbitrary files via memory mapped file names...

PT-1999-1815

Name of the Vulnerable Software and Affected Versions: strace affected versions not specified Description: The issue allows local users to read arbitrary files via memory mapped file names. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2005-5602 · Suse +2 · Opensuse +3

Name of the Vulnerable Software and Affected Versions: openSUSE affected versions not specified Linux kernel before 2.6.13 kernel-patch-2.4.27-s390 Description: The issue involves multiple vulnerabilities in various packages of the openSUSE operating system, which can lead to a breach of...