CVE-2007-2654

xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.

🔗 References (20)

• cve@mitrehttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=417894
• cve@mitrehttp://osvdb.org/36716
• cve@mitrehttp://secunia.com/advisories/25220
• cve@mitrehttp://secunia.com/advisories/25425
• cve@mitrehttp://secunia.com/advisories/25761
• cve@mitrehttp://secunia.com/advisories/26867
• cve@mitrehttp://www.mandriva.com/security/advisories?name=MDKSA-2007:134
• cve@mitrehttp://www.novell.com/linux/security/advisories/2007_10_sr.html
• cve@mitrehttp://www.securityfocus.com/bid/23922
• cve@mitrehttp://www.ubuntu.com/usn/usn-516-1
• af854a3a-2127-422b-91ae-364da2661108http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=417894
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/36716
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25220
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25425
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25761