25 matches found
EUVD-2014-7174
Malware in sbrugna...
EUVD-2014-7172
Malware in sbrugna...
EUVD-2014-7173
Malware in sbrugna...
CVE-2014-7303
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading etc/dbdump.db...
CVE-2014-7302
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to change the permissions of arbitrary files by executing /opt/sgi/sgimc/bin/vx...
CVE-2014-7301
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading /etc/odapw...
Default credentials
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading etc/dbdump.db...
Code injection
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to change the permissions of arbitrary files by executing /opt/sgi/sgimc/bin/vx...
Default credentials
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading /etc/odapw...
CVE-2014-7303
SGI Tempo on SGI ICE-X systems stored backups of the system configuration database with insecure file permissions (world-readable) on /etc/dbdump.db, enabling local users to read password hashes and other sensitive data. Affected components/requisites include the database dumps produced by Tempo ...
CVE-2014-7303
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading etc/dbdump.db...
CVE-2014-7302
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to change the permissions of arbitrary files by executing /opt/sgi/sgimc/bin/vx...
CVE-2014-7302
The CVE-2014-7302 entry concerns SGI Tempo on SGI ICE-X systems where the /opt/sgi/sgimc/bin/vx binary has insecure SUID root permissions (example: -rwsr-sr-x 1 root root). This allows low-privileged local users to escalate to root by executing vx and applying its permission-changing capabilities...
CVE-2014-7301
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading /etc/odapw...
CVE-2014-7301: Incorrect Default Permissions
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading /etc/odapw...
PT-2020-7736
Name of the Vulnerable Software and Affected Versions SGI Tempo affected versions not specified Description The issue allows local users to obtain password hashes and possibly other sensitive information by reading certain files due to weak permissions. Recommendations At the moment, there is no...
PT-2020-7734
Name of the Vulnerable Software and Affected Versions SGI Tempo affected versions not specified Description The issue allows local users to obtain password hashes and possibly other sensitive information by reading /etc/odapw due to weak permissions for certain files. Recommendations At the momen...
CVE-2014-7302: Incorrect Default Permissions
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to change the permissions of arbitrary files by executing /opt/sgi/sgimc/bin/vx...
CVE-2014-7303: Incorrect Default Permissions
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading etc/dbdump.db...
PT-2020-7735
Name of the Vulnerable Software and Affected Versions SGI Tempo affected versions not specified Description The issue allows local users to change the permissions of arbitrary files by executing /opt/sgi/sgimc/bin/vx. This is due to weak permissions for certain files. Recommendations At the momen...