medium4.4
CVE-2007-2654
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesyste…
Impact
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Suse | Suse Linux | Versions 1.0, 8, 9.0 |
| Suse | Suse Linux Openexchange Server | Version 4.0 |
| Suse | Suse Linux School Server | Version gold |
| Suse | Suse Linux Standard Server | Version 8.0 |
| Suse | Suse Open Enterprise Server | Version 9 |
| Xfsdump | Xfsdump | Version 2.2.38 |
| Suse | Opensuse | Version 10.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=417894
- http://osvdb.org/36716
- http://secunia.com/advisories/25220
- http://secunia.com/advisories/25425
- http://secunia.com/advisories/25761
- http://secunia.com/advisories/26867
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:134
- http://www.novell.com/linux/security/advisories/2007_10_sr.html
- http://www.securityfocus.com/bid/23922
- http://www.ubuntu.com/usn/usn-516-1
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=417894
- http://osvdb.org/36716
- http://secunia.com/advisories/25220
- http://secunia.com/advisories/25425
- http://secunia.com/advisories/25761
- http://secunia.com/advisories/26867
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:134
- http://www.novell.com/linux/security/advisories/2007_10_sr.html
- http://www.securityfocus.com/bid/23922
- http://www.ubuntu.com/usn/usn-516-1