Lucene search
+L

2853 matches found

osv_cve
osv_cve
•added 2012/10/09 11:55 p.m.•21 views

CVE-2012-4453

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information...

6AI score
SaveExploits0References13
UbuntuCve
UbuntuCve
•added 2012/10/09 11:55 p.m.•27 views

CVE-2012-4453

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information...

2.1CVSS7AI score0.00364EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2012/10/09 11:55 p.m.•34 views

UBUNTU-CVE-2012-4453

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information...

2.1CVSS7.1AI score0.00364EPSS
SaveExploits0References2
Prion
Prion
•added 2012/10/09 11:55 p.m.•21 views

Information disclosure

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information...

2.1CVSS6.4AI score0.00364EPSS
SaveExploits0References8Affected Software5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/10/09 12:00 a.m.•5 views

CVE-2012-4453: Incorrect Default Permissions

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information...

2.1CVSS5.8AI score0.00364EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/08/30 12:00 a.m.•23 views

Fedora Update for perl-Config-IniFiles FEDORA-2012-7763

Check for the Version of perl-Config-IniFiles OpenVAS Vulnerability Test Fedora Update for perl-Config-IniFiles FEDORA-2012-7763 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

3.6CVSS6.4AI score0.00504EPSS
SaveExploits2References2
osv_debian
osv_debian
•added 2012/08/27 11:55 p.m.•13 views

DEBIAN-CVE-2011-4944

Python 2.6 through 3.2 creates /.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file...

1.9CVSS8.2AI score0.00429EPSS
SaveExploits1References1
Prion
Prion
•added 2012/08/27 11:55 p.m.•32 views

Race condition

Python 2.6 through 3.2 creates /.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file...

1.9CVSS6.5AI score0.00429EPSS
SaveExploits1References20Affected Software1
osv_psf
osv_psf
•added 2012/08/27 11:00 p.m.•19 views

PSF-2012-2 pypirc created insecurely

Python 2.6 through 3.2 creates /.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file...

1.9CVSS8.9AI score0.00429EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2012/08/12 12:55 a.m.•25 views

CVE-2012-3457

PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for processperfdata.cfg, which allows local users to obtain the Gearman shared secret by reading the file...

2.1CVSS5.9AI score0.00342EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/08/12 12:00 a.m.•10 views

CVE-2012-3457: Undefined Security Weakness

PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for processperfdata.cfg, which allows local users to obtain the Gearman shared secret by reading the file...

2.1CVSS5.8AI score0.00342EPSS
SaveExploits0References2
CVE
CVE
•added 2012/08/12 12:00 a.m.•62 views

CVE-2012-3457

CVE-2012-3457 affects PNP4Nagios 0.6–0.6.16. The root cause is world-readable permissions on the file process_perfdata.cfg , which allows local users to read the Gearman shared secret . Public references include NVD, OpenVAS/Fedora advisories, and Ubuntu/Prion entries confirming the same vulnerab...

2.1CVSS6.1AI score0.00342EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2012/08/08 10:26 a.m.•29 views

CVE-2012-0421

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file...

2.1CVSS6.3AI score0.00321EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2012/08/08 10:00 a.m.•42 views

CVE-2012-0421

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file...

6.3AI score0.00321EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/08/08 12:00 a.m.•12 views

CVE-2012-0421: Exposure of Sensitive Information to an Unauthorized Actor

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file...

2.1CVSS5.8AI score0.00321EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2012/08/01 12:00 a.m.•36 views

Scientific Linux Security Update : gfs2-utils on SL5.x i386/x86_64

Multiple insecure temporary file use flaws were discovered in GFS2 user level utilities. A local attacker could use these flaws to overwrite an arbitrary file writable by a victim running those utilities typically root with the output of the utilities via a symbolic link attack. CVE-2008-6552 Thi...

6.9CVSS5.9AI score0.00379EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2012/08/01 12:00 a.m.•65 views

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - A NULL pointer dereference flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could send a...

7.8CVSS7.1AI score0.03769EPSS
SaveExploits2References7
OpenVAS
OpenVAS
•added 2012/07/30 12:00 a.m.•27 views

CentOS Update for libguestfs CESA-2012:0774 centos6

Check for the Version of libguestfs OpenVAS Vulnerability Test CentOS Update for libguestfs CESA-2012:0774 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

2.1CVSS6.4AI score0.00408EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/07/30 12:00 a.m.•26 views

CentOS Update for libguestfs CESA-2012:0774 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

2.1CVSS5.2AI score0.00408EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2012/07/25 7:55 p.m.•18 views

DEBIAN-CVE-2012-2760

modauthopenid before 0.7 for Apache uses world-readable permissions for /tmp/modauthopenid.db, which allows local users to obtain session ids...

2.1CVSS6.6AI score0.01004EPSS
SaveExploits5References1
Rows per page
Query Builder