Rpath

Rpath Linux

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2008-1078

Exploit
  • EPSS 0.03%
  • Published 29.02.2008 02:44:00
  • Last modified 09.04.2025 00:30:58

expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID] temporary file. NOTE: this is the same issue as CVE-2003-0308.1.

4.9

CVE-2007-5686

  • EPSS 0.18%
  • Published 28.10.2007 17:08:00
  • Last modified 09.04.2025 00:30:58

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certa...

8.5

CVE-2007-1351

  • EPSS 7.49%
  • Published 06.04.2007 01:19:00
  • Last modified 09.04.2025 00:30:58

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflo...

7.2

CVE-2007-0536

  • EPSS 0.04%
  • Published 27.01.2007 00:28:00
  • Last modified 09.04.2025 00:30:58

The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges.