CVE-2003-0173

CVE-2003-0173 affects xfsdump and its helper xfsdq. When quotas are enabled, xfsdump saves quota information by invoking xfsdq and creates the output file at the root of the target filesystem in an unsafe manner, allowing local users to gain root privileges. Debian’s DSA-283-1 documents the issue...

CVE-2003-0173: Undefined Security Weakness

xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges...