3 matches found
PT-2014-2311
Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.1 Description The issue concerns the smart proxy in Foreman, where a umask set to 0 allows local users to modify files created by the daemon. Recommendations For versions prior to 1.1, update to version 1.1 or later...
CVE-2001-1322
The CVE-2001-1322 issue concerns xinetd up to version 2.1.8 (and earlier) running with a default umask of 0, allowing local users to read or modify files created by processes started by xinetd that don’t set a safe umask. Public sources in the connected docs identify this as a local-privilege ris...
CVE-2001-1322: Undefined Security Weakness
xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask...