712 matches found
CVE-2013-7203
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup...
DEBIAN-CVE-2013-7203
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup...
CVE-2013-7203
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup...
CVE-2013-7203
The CVE-2013-7203 entry concerns gitolite prior to commit fa06a34, where local users could read arbitrary files in repositories due to vectors related to the user umask during gitolite setup. Connected records (NVD and OSV/Ubuntu/Debian feeds) confirm the same description across multiple sources....
CVE-2013-7203
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup...
CVE-2013-7203
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup...
postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask
This release of CloudForms corrects an issue invoked when running pgupgrade by which attackers could read or modify the output of pgdumpall -g in the current working directory. With this release, any attack is rendered infeasible as the directory mode blocks an intruder from searching the current...
Debian DLA-1472-1 : libcgroup security update
The cgrulesengd daemon in libcgroup creates log files with world readable and writable permissions due to a reset of the file mode creation mask umask0. For Debian 8 'Jessie', this problem has been fixed in version 0.41-6+deb8u1. We recommend that you upgrade your libcgroup packages. NOTE: Tenabl...
[SECURITY] [DLA 1472-1] libcgroup security update
Package : libcgroup Version : 0.41-6+deb8u1 CVE ID : CVE-2018-14348 Debian Bug : 906308 The cgrulesengd daemon in libcgroup creates log files with world readable and writable permissions due to a reset of the file mode creation mask umask0. For Debian 8 "Jessie", this problem has been fixed in...
postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask
This release of CloudForms corrects an issue invoked when running pgupgrade by which attackers could read or modify the output of pgdumpall -g in the current working directory. With this release, any attack is rendered infeasible as the directory mode blocks an intruder from searching the current...
DEBIAN-CVE-2018-14348
libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information...
UBUNTU-CVE-2018-14348
libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information...
CVE-2018-14348
libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information...
CVE-2018-14348
libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information...
EulerOS 2.0 SP3 : xdg-user-dirs (EulerOS-SA-2018-1181)
According to the version of the xdg-user-dirs package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that the system umask policy is not being honored when creating XDG user directories /Desktop etc on first login. This could lea...
Security Bulletin: TADDM – Security improvement: More restricted permission on TADDM files on UNIX-like servers.
Summary TADDM security improvement deployed started from TADDM 7.2.1.5 and in TADDM 7.2.2 that restrict access to TADDM files on UNIX-like servers. Vulnerability Details CVE-2013-4040 Description Default TADDM file permission on UNIX-like servers, by default are 755 rwx r-x r-x, that allow all...
Amazon Linux 2 : xdg-user-dirs (ALAS-2018-1030)
It was found that the system umask policy is not being honored when creating XDG user directories /Desktop etc on first login. This could lead to user's files being inadvertently exposed to other local users.CVE-2017-15131 C Tenable Network Security, Inc. The descriptive text and package checks i...
Low: xdg-user-dirs
Issue Overview: It was found that the system umask policy is not being honored when creating XDG user directories /Desktop etc on first login. This could lead to user's files being inadvertently exposed to other local users.CVE-2017-15131 Affected Packages: xdg-user-dirs Note: This advisory is...
Versa Networks: Insecure File Creation Mask
In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa...