|
SUSE Linux Permissions Package CHKSTAT Insecure Permissions Handling Vulnerability
The SUSE Linux 'permissions' package is susceptible to a local information disclosure vulnerability. This issue is due to improper handling of file permissions by the 'chkstat' utility. This issue is due to the inherent insecurity of attempting to modify files contained in world-writable directories. Local attackers may gain access to the contents of potentially sensitive files, aiding them in further attacks. |
|
|
Privacy Statement |
