11 matches found
Astra Linux - уязвимость в redis
Redis is an in-memory database that persists data on disk. Upon startup, Redis begins listening on Unix sockets before adjusting its permissions according to the user-provided configuration. If a permissive umask value is used, this can create a race condition that allows another process to...
EUVD-2019-13104
Malware in sbrugna...
CVE-2019-3466
The pgctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation...
CLSA-2023-1700852317 samba: Fix of CVE-2023-3961
CVE-2023-3961: Fix a path traversal out of the socket directory - fix chagelog's versions...
samba: Fix of CVE-2023-3961
CVE-2023-3961: Fix a path traversal out of the socket directory - fix chagelog's versions...
CLSA-2023-1700834882 samba: Fix of CVE-2023-3961
CVE-2023-3961: Fix a path traversal out of the socket directory...
CLSA-2023-1700834265 samba: Fix of CVE-2023-3961
CVE-2023-3961: Fix a path traversal out of the socket directory...
CLSA-2023-1700833977 samba: Fix of CVE-2023-3961
CVE-2023-3961: Fix a path traversal out of the socket directory...
MGASA-2022-0306 Updated canna packages fix security vulnerability
Move UNIX socket dir from /tmp to /run to avoid local attackers being able to place bogus directories in its stead. CVE-2022-21950...
UBUNTU-CVE-2013-4419
The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitra...
CVE-2005-0134
Technical details about CVE-2005-0134 are not publicly available in the provided connected documents. No affected versions, root cause, impact, or mitigations are disclosed here. Monitor for updates.