Beveiligingsadvies

CVE-2011-4578

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2012-08-29 22:00:00
Laatst bijgewerkt 2024-08-07 00:09:19
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

event.c in acpid (aka acpid2) before 2.0.11 does not have an appropriate umask setting during execution of event-handler scripts, which might allow local users to (1) perform write operations within directories created by a script, or (2) read files created by a script, via standard filesystem system calls.