CVE-2017-8108

概要

参考情報

• securityfocus.com/bid/99288 · Third Party Advisory
• cisofy.com/security/cve/cve-2017-8108 · Third Party Advisory
• CISOfy/lynis release 2.5.0 · Mitigation
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJXMPYANXHI25NQZ36QMXNXANDRAA5YG
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJHLLWNW7NASVXCK24YBSIUQQPWGCMB5

lynis のその他の脆弱性

• CVE-2020-13882中 4.2CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file perm…
• CVE-2019-13033低 3.3In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. Thi…
• CVE-2014-3986低 3.3include/tests_webservers in Lynis before 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.*.unsort…
• CVE-2014-3982低 3.3include/tests_webservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.#…