CVE-2014-3986

概要

参考情報

• cisofy.com/files/lynis-1.5.5.tar.gz
• openwall.com/lists/oss-security/2014/06/05/14
• openwall.com/lists/oss-security/2014/06/06/12
• openwall.com/lists/oss-security/2014/06/07/3
• seclists.org/fulldisclosure/2014/Jun/21

lynis のその他の脆弱性

• CVE-2020-13882中 4.2CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file perm…
• CVE-2019-13033低 3.3In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. Thi…
• CVE-2017-8108高 7.8Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a …
• CVE-2014-3982低 3.3include/tests_webservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.#…