NVD

Id
32094  
Name
CVE-2014-4039  
Description
ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-06-17  
Modified Date
2017-01-06  
Seq
2014-4039  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168852 32094 CVE-2014-4039 SUSE-SU-2014:0928  View
168853 32094 CVE-2014-4039 [oss-security] 20140617 Re: CVE request: multiple /tmp races in ppc64-diag  View
168854 32094 CVE-2014-4039 RHSA-2015:0383  View
168855 32094 CVE-2014-4039 RHSA-2015:1320  View
168856 32094 CVE-2014-4039 60616  View
168857 32094 CVE-2014-4039 68086  View
168858 32094 CVE-2014-4039 https://bugzilla.redhat.com/show_bug.cgi?id=1109371  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14089 JVNDB-2014-002964 ppc64-diag における重要な情報を取得される脆弱性 ppc64-diag は、/tmp/diagSEsnap に対して 0775 パーミッションを使用し、/tmp/diagSEsnap/snapH.tar.gz に対するパーミッションを適切に制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2014-4039 71327 CVE-2014-4039 32094 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002964.html 2014-06-13 2015-11-09 View