Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

xfsdump: insecure temp dir

Package(s):

xfsdump

CVE #(s):

CVE-2007-2654

Created:

June 22, 2007

Updated:

September 21, 2007

Description:

xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.

Alerts:

Ubuntu	USN-516-1	2007-09-20
Mandriva	MDKSA-2007:134	2007-06-21

(Log in to post comments)