Page 200 of 1170 results (0.010 seconds)

CVSS: 4.6EPSS: 0%CPEs: 30EXPL: 0

StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434 http://secunia.com/advisories/17025 http://secunia.com/advisories/19489 http://sourceforge.net/project/shownotes.php?release_id=352676 http://www.securityfocus.com/advisories/9384 http://www.us.debian.org/security/2006/dsa-1022 •

CVSS: 2.1EPSS: 0%CPEs: 30EXPL: 0

StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434 http://secunia.com/advisories/17025 http://secunia.com/advisories/19489 http://sourceforge.net/project/shownotes.php?release_id=352676 http://www.securityfocus.com/advisories/9384 http://www.securityfocus.com/bid/14985 http://www.us.debian.org/security/2006/dsa-1022 •

CVSS: 2.1EPSS: 0%CPEs: 30EXPL: 0

StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434 http://secunia.com/advisories/17025 http://secunia.com/advisories/19489 http://sourceforge.net/project/shownotes.php?release_id=352676 http://www.securityfocus.com/advisories/9384 http://www.us.debian.org/security/2006/dsa-1022 •

CVSS: 4.6EPSS: 0%CPEs: 3EXPL: 1

Buffer overflow in liby2util in Yet another Setup Tool (YaST) for SuSE Linux 9.3 allows local users to execute arbitrary code via a long Loc entry. • http://www.novell.com/linux/security/advisories/2005_22_sr.html http://www.securityfocus.com/bid/14861 https://exchange.xforce.ibmcloud.com/vulnerabilities/24323 •

CVSS: 2.1EPSS: 0%CPEs: 9EXPL: 0

Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function. Vulnerabilidad desconocida en el kernel de Linux permite que usuarios locales provoquen una denegación de servicio mediante ptrace • http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea78729b8dbfc400fe165a57b90a394a7275a54 http://secunia.com/advisories/17002 http://secunia.com/advisories/17073 http://secunia.com/advisories/18056 http://secunia.com/advisories/19369 http://securitytracker.com/id?1014275 http://www.debian.org/security/2005/dsa-922 http://www.debian.org/security/2006/dsa-1018 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.1 http://www.novell&# • CWE-20: Improper Input Validation •