Symantec Veritas Storage Foundation unauthorized access

qioadmin utility allows local files read access. qiomkfile allows memory content reading...

Symantec Veritas File System qioadmin本地信息泄露漏洞

BUGTRAQ ID: 31679 VERITAS File System（VxFS）是Symantec Storage Foundation套件中的文件系统组件。 VxFS的qioadmin工具中存在文件内容泄露漏洞。如果系统授权访问到系统并可以运行qioadmin工具的话，就可以向qioadmin提供任意文件名并将文件内容重新定向并dump到标准错误输出中。qioadmin工具为set-uid root，因此非特权用户可以绕过系统文件权限限制访问特权系统信息。 Symantec Veritas File System 5.x Symantec Veritas File System...

SECOBJADV-2008-05: Symantec Veritas Storage Foundation Arbitrary File Read Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-05 = ====================================================================== Veritas Storage Foundation Arbitrary File Read Vulnerability...

CVE-2008-4638

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

CVE-2008-4638

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

CVE-2008-4638

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

CVE-2008-4638

CVE-2008-4638 affects Symantec Veritas Storage Foundation (VxFS) 5.0 and earlier, via the Quick I/O for Databases feature. The vulnerable component is the setuid root utility qioadmin , which can be fed an arbitrary filename and will write that file’s contents to the standard error stream, enabli...

CVE-2008-4638: Exposure of Sensitive Information to an Unauthorized Actor

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...