Lucene search
+L

19 matches found

EUVD
EUVD
•added 2026/04/22 6:31 p.m.•21 views

EUVD-2026-24982

The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p preserve flag, the utility applies the source mode bits even if the chown operation is unsuccessful. This can result in a user-owned copy retaining origin...

6.6CVSS5.7AI score0.00133EPSS
SaveExploits1References2
OSV
OSV
•added 2026/04/22 6:31 p.m.•28 views

GHSA-X2WV-9P67-MH9W uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails

The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p preserve flag, the utility applies the source mode bits even if the chown operation is unsuccessful. This can result in a user-owned copy retaining origin...

6.6CVSS5.8AI score0.00133EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2026/04/22 6:31 p.m.•20 views

uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails

The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p preserve flag, the utility applies the source mode bits even if the chown operation is unsuccessful. This can result in a user-owned copy retaining origin...

6.6CVSS5.2AI score0.00133EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/04/22 6:31 p.m.•18 views

uutils coreutils doesn't preserve file ownership during moves across different filesystem boundaries

The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller's UID/GID rather than the source's metadata. This flaw breaks backups and...

4.2CVSS5.2AI score0.0014EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
•added 2026/04/22 6:31 p.m.•28 views

EUVD-2026-24984

The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller's UID/GID rather than the source's metadata. This flaw breaks backups and...

4.2CVSS5.8AI score0.0014EPSS
SaveExploits1References2
OSV
OSV
•added 2026/04/22 6:31 p.m.•18 views

GHSA-957R-R8GC-VV3H uutils coreutils doesn't preserve file ownership during moves across different filesystem boundaries

The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller's UID/GID rather than the source's metadata. This flaw breaks backups and...

4.2CVSS5.8AI score0.0014EPSS
SaveExploits1References3
NVD
NVD
•added 2026/04/22 5:16 p.m.•25 views

CVE-2026-35350

The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p preserve flag, the utility applies the source mode bits even if the chown operation is unsuccessful. This can result in a user-owned copy retaining origin...

6.6CVSS0.00133EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2026/04/22 5:16 p.m.•17 views

CVE-2026-35351

The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller's UID/GID rather than the source's metadata. This flaw breaks backups and...

4.2CVSS5.8AI score0.0014EPSS
SaveExploits1References3
OSV
OSV
•added 2026/04/22 5:16 p.m.•16 views

UBUNTU-CVE-2026-35351

The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller's UID/GID rather than the source's metadata. This flaw breaks backups and...

4.2CVSS5.8AI score0.0014EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/04/22 4:08 p.m.•16 views

CVE-2026-35351

The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller's UID/GID rather than the source's metadata. This flaw breaks backups and...

4.2CVSS5.8AI score0.0014EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2026/04/22 4:08 p.m.•20 views

CVE-2026-35351

The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller's UID/GID rather than the source's metadata. This flaw breaks backups and...

4.2CVSS5.3AI score0.0014EPSS
SaveExploits1
Cvelist
Cvelist
•added 2026/04/22 4:08 p.m.•54 views

CVE-2026-35350 uutils coreutils cp Unexpected Privileged Executable Creation with -p

The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p preserve flag, the utility applies the source mode bits even if the chown operation is unsuccessful. This can result in a user-owned copy retaining origin...

6.6CVSS0.00133EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/04/22 4:08 p.m.•11 views

CVE-2026-35350

The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p preserve flag, the utility applies the source mode bits even if the chown operation is unsuccessful. This can result in a user-owned copy retaining origin...

6.6CVSS5.7AI score0.00133EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/04/22 4:08 p.m.•11 views

CVE-2026-35350 uutils coreutils cp Unexpected Privileged Executable Creation with -p

The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p preserve flag, the utility applies the source mode bits even if the chown operation is unsuccessful. This can result in a user-owned copy retaining origin...

6.6CVSS5.7AI score0.00133EPSS
SaveExploits1References1
CVE
CVE
•added 2026/04/22 4:08 p.m.•48 views

CVE-2026-35350

The CVE-2026-35350 entry concerns the cp utility in uutils coreutils. When using -p (preserve), if chown fails, the tool applies the source’s mode bits, potentially producing a user-owned copy with privileged bits (setuid/setgid) and violating local security policies. This behavior differs from G...

6.6CVSS5.7AI score0.00133EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•16 views

PT-2026-34487

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description The mv utility fails to preserve file ownership when moving files across different filesystem boundaries. In these instances, the utility uses a copy-and-delete routine that creates...

4.2CVSS5.8AI score0.0014EPSS
SaveExploits1References11
Tenable Nessus
Tenable Nessus
•added 2026/04/22 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-35350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p preserve flag, th...

6.6CVSS5.5AI score0.00133EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/04/22 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-35351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a...

4.2CVSS5.3AI score0.0014EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•13 views

PT-2026-34486

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description The cp utility fails to properly handle setuid and setgid bits when ownership preservation fails. When using the '-p' preserve flag, the utility applies the source mode bits even if...

6.6CVSS5.7AI score0.00133EPSS
SaveExploits1References10
Rows per page
Query Builder