CVE-2007-2654
Fixed in a distro release EPSS <1%
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
Products: suse_linux, suse_linux_openexchange_server, suse_linux_school_server, suse_linux_standard_server, suse_open_enterprise_server, xfsdump, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xfsdump | 2.2.45-1 |
| Debian 13 | xfsdump | 2.2.45-1 |
| Debian 14 | xfsdump | 2.2.45-1 |