EulerOS 2.0 SP3 : oddjob (EulerOS-SA-2020-2086)

According to the version of the oddjob packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A race condition was found in the mkhomedir tool shipped with the oddjob package in versions before 0.34.5 and 0.34.6 wherein, during the home...

EulerOS 2.0 SP3 : file-roller (EulerOS-SA-2020-2135)

According to the version of the file-roller packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a...

mysqld_safe in Oracle MySQL through 5.5.51 5.6.x through 5.6.32 and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2 5.6.x before 5.6.32-78-1 and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0 5.6.x before 5.6.32-25.17 and 5.7.x before 5.7.14-26.17 when using file-based logging allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

...

cp when running with an option to preserve symlinks on multiple OSes allows local user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.

...

Acronis: Local Privilege Escalation when deleting a file from Quarantine

Vulnerability description not provided...

Acronis: Local Privilege Escalation and Code Execution when restoring files from Quarantine

Vulnerability description not provided...

Open redirect

On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the OEXCL flag. An attacker could exploit this to launch a symlink attack, though this is partially mitigated by...

CVE-2014-1420

The CVE-2014-1420 entry concerns Ubuntu UI Toolkit’s StateSaver, which serializes data to tmp/ files and can open files without O_EXCL, enabling a local symlink attack that could expose sensitive data. The issue is described as a local, low-severity vulnerability with partial mitigations due to U...

PT-2020-6803 · Nlnet +8 · Nsd +9

Name of the Vulnerable Software and Affected Versions: NLnet Labs Unbound versions up to and including 1.12.0 NLnet Labs NSD versions up to and including 4.3.3 Description: The issue is related to a local vulnerability that allows for a local symlink attack. When writing the PID file, Unbound and...

EulerOS Virtualization for ARM 64 3.0.2.0 : cpio (EulerOS-SA-2020-1962)

According to the version of the cpio package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attac...

Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2020-1962)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : chrony (ALAS-2020-1431)

The version of chrony installed on the remote host is prior to 3.2-1.27. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1431 advisory. A flaw was found in chrony when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup...

Medium: chrony

Issue Overview: A flaw was found in chrony when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup while still running as the root user, and when it's opened for writing, chronyd does not check for an existing symbolic link with the same file name...

Path traversal

This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based relative and absolute path traversal attacks in cpio file extraction...

Symlink Attack

ark is vulnerable to symlink attack. An attacker is able to install files outside of the extraction directory using a maliciously TAR archive with symlinks...

Huawei EulerOS: Security Advisory for libqb (EulerOS-SA-2020-1863)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-202008-23 : chrony: Symlink vulnerability

The remote host is affected by the vulnerability described in GLSA-202008-23 chrony: Symlink vulnerability It was found that chrony did not check whether its PID file was a symlink. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with root privileges. Workarou...

EulerOS 2.0 SP8 : libqb (EulerOS-SA-2020-1863)

According to the version of the libqb packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames under /dev/shm and /t...

CVE-2020-14367

Chrony before 3.5.1 is vulnerable to a local symlink attack on its PID file in /var/run/chrony. During startup, the PID file is created as root and, per sources, chronyd does not check for an existing symlink with the same file name. A privileged attacker could create a symlink named chrony’s def...

Updated chrony package fixes security vulnerability

Chrony's method of opening its PID file could allow a compromised chrony user account to overwrite files in certain parts of the filesystem with chrony's PID, using a symlink attack CVE-2020-14367...