712 matches found
CVE-2009-5054
Smarty before 3.0.0 beta 4 does not consider the umask value when setting file permissions, which may allow bypass of intended access restrictions via standard filesystem operations. Affected component: Smarty (PHP template engine). Root cause: permissions are assigned without regard to umask, en...
CVE-2010-4512
Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories...
Design/Logic Flaw
Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories...
CVE-2010-4512
Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories...
CVE-2010-4512
CVE-2010-4512 affects Cobbler, with the issue present in versions prior to 2.0.4. The root cause is an incorrect umask value that allows local users to create or modify files/directories with world-writable permissions, enabling a local-privilege-equivalent impact. The available descriptions do n...
GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation
Source: http://marc.info/?l=full-disclosure&m=128776663124692&w=2 The GNU C library dynamic linker will dlopen arbitrary DSOs during setuid loads ------------------------------------------------------------------------------- Cześć, This advisory describes CVE-2010-3856, an addendum to...
linux/x86 sys_execve("/bin/sh", "0", "0") with umask 16 (sys_umask(14))
Exploit for linux/x86 platform in category shellcode ================================================================================ linux/x86 sysexecve"/bin/sh", "0", "0" with umask 16 sysumask14 45 bytes ================================================================================...
linux/x86 sys_execve"/bin/sh", "0", "0" with umask 16 sys_umask14 45 bytes
linux/x86 sysexecve"/bin/sh", "0", "0" with umask 16 sysumask14 45 bytes. Shellcode exploit for linux platform 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by...
List an Verify umask entries in /etc/profile and ~/.profile
This plugin uses SSH to list an verify umask entries in /etc/profile and /.profile. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Design/Logic Flaw
acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...
CVE-2009-4235
acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...
CVE-2009-4235
acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...
CVE-2009-4235
acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...
CVE-2009-4235
CVE-2009-4235 affects acpid 1.0.4, where an unrestrictive umask may grant local users weak permissions on /var/log/acpid. This could allow reading sensitive information or overwriting the log file to cause a denial of service. The provided connected documents confirm the existence of this vulnera...
CVE-2009-4235
acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...
CVE-2009-4235
acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...
IBM AIX 5.3 - 'libc' MALLOCDEBUG File Overwrite
!/bin/bash \ / /| | | | \ | | | | | | \ | | | | | | \ \ | | \ | | | | \ | | \ \ | | | \ | |/ / |/ http://root-the.net + IBM AIX libc MALLOCDEBUG File Overwrite Vulnerability + Refer : securitytracker.com/id?1022261 + Exploit : Affix + Tested on : IBM AIX + Greetz : Mad-Hatter, Atomiku, RTN,...
Mandriva Linux Security Advisory : kernel (MDVSA-2008:105)
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges. CVE-2007-3740 The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets,...
Mandriva Update for postfix MDKA-2007:079 (postfix)
Check for the Version of postfix OpenVAS Vulnerability Test Mandriva Update for postfix MDKA-2007:079 postfix Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
