Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2014-4038

ppc64-diag: multiple temporary file races

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Ppc64-diag Project Redhat Suse
Products
Ppc64-diag Enterprise Linux Enterprise Linux Server and 1 more
CVE-2014-4039

ppc64-diag: multiple temporary file races

ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Ppc64-diag Project Redhat Suse
Products
Ppc64-diag Enterprise Linux Enterprise Linux Server and 1 more