Oracle Solaris Critical Patch Update : apr2016_SRU11_3_7_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Network Configuration Service. The supported version that is affected is 11.3. Easily exploitable vulnerability allow...

Meet Linux's New Fastest File-System – Bcachefs

First announced over five years ago, ex-Google engineer Kent Overstreet is pleasured in announcing the general availability of a new open-source file-system for Linux, called the Bcache File System or Bcachefs. Bcachefs is a Linux kernel block layer cache that aims at offering a speedier and more...

Oracle Sun Systems Products Sun Solaris Arbitrary Code Execution Vulnerability

Oracle Sun Solaris is a commercial Unix operating system. A security vulnerability in the ZFS File system subcomponent of the Oracle Sun Solaris component of Oracle Sun Systems Products Suite can be exploited by a local attacker to execute arbitrary code with elevated privileges...

CVE-2015-0448

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via vectors related to ZFS File system...

CVE-2015-0448

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via vectors related to ZFS File system...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via vectors related to ZFS File system...

CVE-2015-0448

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via vectors related to ZFS File system...

CVE-2015-0448

CVE-2015-0448 affects Oracle Solaris 11.2, specifically the ZFS File System subcomponent. The vulnerability allows a local attacker to impact confidentiality, integrity, and availability, with CNVD reporting arbitrary code execution with elevated privileges via ZFS. The NVD entry describes a loca...

Oracle Solaris Critical Patch Update : apr2015_SRU11_2_8_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: ZFS File system. The supported version that is affected is 11.2. Easily exploitable vulnerability requiring logon to...

Design/Logic Flaw

The bsdinstall installer in FreeBSD 10.x before 10.1 p9, when configuring full disk encrypted ZFS, uses world-readable permissions for the GELI keyfile /boot/encryption.key, which allows local users to obtain sensitive key information by reading the file...

CVE-2015-1415

The bsdinstall installer in FreeBSD 10.x before 10.1 p9, when configuring full disk encrypted ZFS, uses world-readable permissions for the GELI keyfile /boot/encryption.key, which allows local users to obtain sensitive key information by reading the file...

CVE-2015-1415

FreeBSD 10.x installations using the bsdinstall installer with full-disk encrypted ZFS store the GELI master key in /boot/encryption.key with permissions 0644, exposing the key to local users. Root cause: default keyfile permissions are too open (world-readable) instead of 0600. Impact: local att...

CVE-2015-1415

The bsdinstall installer in FreeBSD 10.x before 10.1 p9, when configuring full disk encrypted ZFS, uses world-readable permissions for the GELI keyfile /boot/encryption.key, which allows local users to obtain sensitive key information by reading the file...

FreeBSD ZFS encryption.key Disclosure Vulnerability

FreeBSD is a UNIX operating system. The FreeBSD 10.x installer supports installations on the encryption ZFS file system by default. After installing the encryption system using ZFS in versions 10.0 and 10.1, there is an incorrect permission restriction on encryption.key that allows local users to...

FreeBSD 10.x ZFS encryption.key disclosure (CVE-2015-1415)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory Information Title: FreeBSD 10.x ZFS encryption.key disclosure CVE-2015-1415 Advisory URL: https://pierrekim.github.io/advisories/CVE-2015-1415.txt.asc Date published: 2015-04-07 Vendors contacted: FreeBSD Release mode: Coordinated release...

FreeBSD zfs weak permissions

Weak file permissions may be set during transaction replay...

FreeBSD weak permissions

Weak ZFS and GELI key files permissions...

FreeBSD 10.x ZFS encryption.key Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory Information Title: FreeBSD 10.x ZFS encryption.key disclosure CVE-2015-1415 Advisory URL: https://pierrekim.github.io/advisories/CVE-2015-1415.txt.asc Date published: 2015-04-07 Vendors contacted: FreeBSD Release mode: Coordinated release...

FreeBSD-SA-15:08.bsdinstall

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:08.bsdinstall Security Advisory The FreeBSD Project Topic: Insecure default GELI keyfile permissions Category: core Module: bsdinstall Announced: 2015-04-07...

FreeBSD -- Insecure default GELI keyfile permissions

Problem Description: The default permission set by bsdinstall8 installer when configuring full disk encrypted ZFS is too open. Impact: A local attacker may be able to get a copy of the geli8 provider's keyfile which is located at a fixed location...