USN-2411-1: mountall vulnerability

Saurav Sengupta discovered that mountall incorrectly handled umask when calling the mount utility, resulting in certain filesystems possibly being mounted with incorrect permissions...

CVE-2014-1421

mountall 1.54, as used in Ubuntu 14.10, does not properly handle the umask when using the mount utility, which allows local users to bypass intended access restrictions via unspecified vectors...

CVE-2014-3209

The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file...

DEBIAN-CVE-2014-3209

The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file...

CVE-2014-3209

The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file...

Design/Logic Flaw

The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file...

CVE-2014-3209

The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file...

CVE-2014-3209

CVE-2014-3209 affects ldns 1.6.x, specifically the ldns-keygen tool. The root cause is that ldns-keygen uses the current umask to set the privileges of the generated private key, which could allow a local attacker to read the private key file and obtain sensitive material. This is a local, unauth...

CVE-2014-3209

The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file...

CVE-2014-2667

Removed by vendor...

CVE-2014-3209

The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file...

CVE-2014-3209: Undefined Security Weakness

The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file...

UBUNTU-CVE-2014-3209

The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file...

OSSEC 2.8 umask Clear Text Passwords

OSSEC 2.8 umask problem with clear text passwords :- [email protected] / SecurityByDefault.com root@digitalsec:/home/aramosf /var/ossec/agentless/registerhost.sh add ossec@server1 Please provide password for host ossec@server1. Password: Please provide additional password for host ossec@server1 f...

Interbase 5/6 GDS_Lock_MGR UMask File Permission Changing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5805/info Interbase is a SQL database distributed and maintained by Borland. It is available for Unix and Linux operating systems. The gdslockmgr program within Interbase is typically installed setuid. This program does n...

SGI IRIX <= 6.4 startmidi Vulnerabilty

No description provided by source. source: http://www.securityfocus.com/bid/469/info A vulnerability exists in the startmidi program from Silicon Graphics. This utility is included with Irix versions 5.x and 6.x with the Iris Digital Media Execution Environment. startmidi is setuid root, and...

linux/x86 sys_execve("/bin/sh", "0", "0") with umask 16 (sys_umask(14)) 45 bytes

No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...

Veritas Software Volume Manager 3.0.2/3.0.3/3.0.4 File Permission Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1356/info A vulnerability exists in the Volume Manager product, versions 3.0.x, from Veritas Software. Volume Manager is a popular disk management package. Volume Manager running on Solaris platforms prior to Solaris 8 ar...

openSUSE Security Update : acpid (openSUSE-2012-55)

set umask for running scripts %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-55. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc';...

Updated ldns package fixes CVE-2014-3209

Updated ldns packages fix security vulnerability: ldns-keygen creates a private key with the default permissions according to the users umask, which in most cases will cause the private key to be world-readable CVE-2014-3209...