5 matches found
CVE-2020-25031
checkinstall 1.6.2, when used to create a package that contains a symlink, may trigger the creation of a mode 0777 executable file...
Code injection
checkinstall 1.6.2, when used to create a package that contains a symlink, may trigger the creation of a mode 0777 executable file...
openSUSE Security Update : shadow (openSUSE-2019-721)
This update for shadow fixes the following security issue : - CVE-2018-16588: Prevent useradd from creating intermediate directories with mode 0777 bsc1106914 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
CVE-2018-16588
CVE-2018-16588 affects the SUSE shadow package’s useradd.c code. Local attackers could exploit it by triggering creation of non-existing intermediate directories with world-writable mode 0777 during user creation, enabling privilege escalation. The impact is local, with high secrecy/ integrity/ a...
SUSE-SU-2018:2835-1 Security update for shadow
This update for shadow fixes the following security issue: - Prevent useradd from creating intermediate directories with mode 0777 bsc1106914...