Vulnerabilities

TI-2014-03294 CVE-2014-4039 · GHSA-ccg6-gvwm-fgpg

ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict…

LOW 11

ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this ar…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00377 Published 2014-06-17 Fixed CWE-264

TI-2014-03293 CVE-2014-4038 · GHSA-8gvg-vxvq-qh2r

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack…

LOW 20

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3)…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00352 Published 2014-06-17 Fixed CWE-59

Vulnerabilities

Filters

ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict…

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack…