Red Hat Security AdvisoryRHSA-2015:0383
ppc64-diag security, bug fix, and enhancement update
Released 2015-03-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7) ppc64-diag-2.6.7-6.el7
Fixes 2 records
Priority LOW 20
ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3)…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00352 · Published 2014-06-17 · Fixed CWE-59
Priority LOW 11
ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this ar…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00377 · Published 2014-06-17 · Fixed CWE-264
