xfsdump symbolic links vulnerability
Published:		22.06.2007
Source:		FULL-DISCLOSURE
SecurityVulns ID:		7842
Type:		local
Level:		5/10
Description:		xfs_fsr utility insecurely creates .fsr temporary directory.

Affected:		XFSDUMP : xfsdump 2.2
CVE:		CVE-2007-2654 (xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.)

Original document

MANDRIVA, [Full-disclosure] [ MDKSA-2007:134 ] - Updated xfsdump packages fix unsafe temporary directory creation issue (22.06.2007)

Discuss:

Read or add your comments to this news (0 comments)