PT-2010-5515

Name of the Vulnerable Software and Affected Versions Cobbler versions prior to 2.0.4 Description The issue allows local users to have an unspecified impact by leveraging world-writable permissions for files and directories due to an incorrect umask value. Recommendations For versions prior to...

CVE-2010-4512: Undefined Security Weakness

Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories...

GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation

Source: http://marc.info/?l=full-disclosure&m=128776663124692&w=2 The GNU C library dynamic linker will dlopen arbitrary DSOs during setuid loads ------------------------------------------------------------------------------- Cześć, This advisory describes CVE-2010-3856, an addendum to...

linux/x86 sys_execve("/bin/sh", "0", "0") with umask 16 (sys_umask(14))

Exploit for linux/x86 platform in category shellcode ================================================================================ linux/x86 sysexecve"/bin/sh", "0", "0" with umask 16 sysumask14 45 bytes ================================================================================...

linux/x86 sys_execve"/bin/sh", "0", "0" with umask 16 sys_umask14 45 bytes

linux/x86 sysexecve"/bin/sh", "0", "0" with umask 16 sysumask14 45 bytes. Shellcode exploit for linux platform 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by...

List an Verify umask entries in /etc/profile and ~/.profile

This plugin uses SSH to list an verify umask entries in /etc/profile and /.profile. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

CVE-2009-4235

acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...

Design/Logic Flaw

acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...

CVE-2009-4235

acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...

CVE-2009-4235

acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...

CVE-2009-4235

acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...

CVE-2009-4235

acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...

CVE-2009-4235

CVE-2009-4235 affects acpid 1.0.4, where an unrestrictive umask may grant local users weak permissions on /var/log/acpid. This could allow reading sensitive information or overwriting the log file to cause a denial of service. The provided connected documents confirm the existence of this vulnera...

CVE-2009-4235: Undefined Security Weakness

acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...

IBM AIX 5.3 - 'libc' MALLOCDEBUG File Overwrite

!/bin/bash \ / /| | | | \ | | | | | | \ | | | | | | \ \ | | \ | | | | \ | | \ \ | | | \ | |/ / |/ http://root-the.net + IBM AIX libc MALLOCDEBUG File Overwrite Vulnerability + Refer : securitytracker.com/id?1022261 + Exploit : Affix + Tested on : IBM AIX + Greetz : Mad-Hatter, Atomiku, RTN,...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:105)

The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges. CVE-2007-3740 The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets,...

Mandriva Update for postfix MDKA-2007:079 (postfix)

Check for the Version of postfix OpenVAS Vulnerability Test Mandriva Update for postfix MDKA-2007:079 postfix Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

device-mapper-multipath security update

0.4.7-23.el53.2 - Added 493401multipathdumaskfix.patch - Resolves: bz 493401...

Ubuntu Update for linux-source-2.6.15/17/20 vulnerabilities USN-518-1

Ubuntu Update for Linux kernel vulnerabilities USN-518-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5181.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.15/17/20 vulnerabilities USN-518-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH...

FreeBSD Ports: qpopper

The remote host is missing an update to the system as announced in the referenced advisory. VID eb29a575-3381-11da-8340-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...