Lucene search
+L

7 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 5:34 a.m.•14 views

SUSE CVE-2013-6412

The transformsave function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors...

4.6CVSS6.5AI score0.00368EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2014/01/23 12:55 a.m.•14 views

DEBIAN-CVE-2013-6412

The transformsave function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors...

4.6CVSS6.1AI score0.00368EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2014/01/23 12:55 a.m.•28 views

UBUNTU-CVE-2013-6412

The transformsave function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors...

4.6CVSS5.8AI score0.00368EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2014/01/20 5:30 p.m.•17 views

augeas: incorrect permissions set on newly created files

The transformsave function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors...

4.6CVSS5.8AI score0.00368EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2013/11/23 6:55 p.m.•15 views

DEBIAN-CVE-2012-0786

The transformsave function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file...

3.3CVSS6.3AI score0.00446EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2013/11/23 12:00 a.m.•6 views

PT-2013-2045

Name of the Vulnerable Software and Affected Versions Augeas versions prior to 1.0.0 Description The issue allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action. This occurs due to a problem in the transfor...

3.3CVSS0.00365EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2013/11/20 8:08 p.m.•18 views

augeas: susceptible to symlink attack

The transformsave function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file...

3.3CVSS5.8AI score0.00446EPSS
SaveExploits0References4
Rows per page
Query Builder