89 matches found
CVE-2018-19046
keepalived 2.0.8 didn't check for existing plain files when writing data to a temporary file upon a call to PrintData or PrintStats. If a local attacker had previously created a file with the expected name e.g., /tmp/keepalived.data or /tmp/keepalived.stats, with read access for the attacker and...
sos-collector information disclosure vulnerability
sos-collector is a utility program for collecting sosreport from multiple nodes. A security vulnerability exists in sos-collector that stems from the program's failure to properly set the default permissions for newly created files, resulting in a local user being able to read all files created b...
PT-2018-12642 · Ibm +2 · Sos-Collector +2
Name of the Vulnerable Software and Affected Versions: sos-collector affected versions not specified Description: A flaw was discovered in sos-collector where it fails to properly set default permissions for newly created files, making them readable by any local user. A local attacker can exploit...
CVE-2017-5425
The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions. On OS OX, this matching allows access to some data in subdirectories of "/private/var" that could expose personal or temporary data. This has been updated to not allow access to "/private/var" and...
ppc64-diag: multiple temporary file races
Multiple insecure temporary file use flaws were found in the way the ppc64-diag utility created certain temporary files. A local attacker could possibly use either of these flaws to perform a symbolic link attack and overwrite arbitrary files with the privileges of the user running ppc64-diag, or...
[SECURITY] Fedora 20 Update: ctdb-2.5.4-2.fc20
CTDB is a cluster implementation of the TDB database used by Samba and other projects to store temporary data. If an application is already using TDB for temporary data it is very easy to convert that application to be cluster aw are and use CTDB instead...
Fedora Core 10 FEDORA-2009-12652 (cups)
The remote host is missing an update to cups announced via advisory FEDORA-2009-12652. OpenVAS Vulnerability Test $Id: fcore200912652.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12652 cups Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...
