EMC Avamar weak permissions

Cache files are world writable...

CVE-2012-2291

EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack...

Design/Logic Flaw

EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack...

CVE-2012-2291

EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack...

PT-2013-1558

Name of the Vulnerable Software and Affected Versions EMC Avamar Client versions 4.x through 6.x EMC Avamar plugin versions 4.x through 6.x for Oracle Description The issue allows local users to gain privileges via an unspecified symlink attack due to world-writable permissions for cache...

CVE-2012-2291: Undefined Security Weakness

EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack...

RedHat Update for OpenIPMI RHSA-2013:0123-01

Check for the Version of OpenIPMI OpenVAS Vulnerability Test RedHat Update for OpenIPMI RHSA-2013:0123-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

OpenIPMI: IPMI event daemon creates PID file with world writeable permissions

ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this fil...

Low: Red Hat Security Advisory: OpenIPMI security, bug fix, and enhancement update

Updated OpenIPMI packages that fix one security issue, multiple bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which give...

CVE-2012-5605

Grinder in Red Hat CloudForms before 1.1 uses world-writable permissions for /var/lib/pulp/cache/grinder/, which allows local users to modify grinder cache files...

Default configuration

Grinder in Red Hat CloudForms before 1.1 uses world-writable permissions for /var/lib/pulp/cache/grinder/, which allows local users to modify grinder cache files...

PT-2013-1812

Name of the Vulnerable Software and Affected Versions Red Hat CloudForms versions prior to 1.1 Description The issue concerns the Grinder in Red Hat CloudForms, where world-writable permissions are used for the /var/lib/pulp/cache/grinder/ directory. This allows local users to modify grinder cach...

CVE-2012-5605: Undefined Security Weakness

Grinder in Red Hat CloudForms before 1.1 uses world-writable permissions for /var/lib/pulp/cache/grinder/, which allows local users to modify grinder cache files...

EMC Avamar: World writable cache files

Product: Avamar backup client for Linux Proberly also Unix but not tested Vendor: EMC http://www.emc.com Tested version: 6.1.100-402 Latest Vendor Notification: December 17, 2012 Vender Patch: None Vender Workaround: quoteworkaround is to run a script at the end of each backup which set the files...

CVE-2012-5638

The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations...

DEBIAN-CVE-2012-5638

The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations...

Design/Logic Flaw

The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations...

CVE-2012-5638

CVE-2012-5638 concerns SANLock: the setup_logging function in log.h creates /var/log/sanlock.log with world-writable permissions, enabling a local user to overwrite log content or bypass quota constraints via standard filesystem writes. The issue is evidenced in multiple sources (NVD/NVD-derived ...

CVE-2012-5638

The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations...

CVE-2012-5638

The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations...