EUVD-2007-2070

Malware in sbrugna...

EUVD-2007-2069

Malware in sbrugna...

ScramDisk 4 for Linux privilege escalation

suid bit is not cleared, it's possible to mount image to system directory...

Code injection

Certain programs in containers in ScramDisk 4 Linux before 1.0-1 execute with SUID permissions, which allows local users to gain privileges via mounted containers...

CVE-2007-2074

Certain programs in containers in ScramDisk 4 Linux before 1.0-1 execute with SUID permissions, which allows local users to gain privileges via mounted containers...

Design/Logic Flaw

ScramDisk 4 Linux before 1.0-1 does not perform permission checks on mount points, which allows local users to gain privileges by using a system directory as a mount point for a container...

CVE-2007-2075

ScramDisk 4 Linux before 1.0-1 does not perform permission checks on mount points, which allows local users to gain privileges by using a system directory as a mount point for a container...

CVE-2007-2075

ScramDisk 4 Linux before 1.0-1 does not perform permission checks on mount points, which allows local users to gain privileges by using a system directory as a mount point for a container...

CVE-2007-2075

ScramDisk 4 Linux before 1.0-1 lacks permission checks on mount points, enabling local users to gain privileges by using a system directory as a mount point for a container. This is described in CVE-2007-2075 with a local-privilege-escalation impact (attack vector LOCAL, without authentication). ...

CVE-2007-2074

CVE-2007-2074 affects ScramDisk 4 Linux prior to 1.0-1. Local users may gain privileges via mounted containers because certain programs execute with SUID permissions. Root cause: SUID containers enable privilege escalation. Exploitation details are not provided in the supplied documents. No remed...

CVE-2007-2074

Certain programs in containers in ScramDisk 4 Linux before 1.0-1 execute with SUID permissions, which allows local users to gain privileges via mounted containers...