CVE-2014-4039
Fixed in a distro release EPSS <1%
ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf.
Products: redhat enterprise_linux_server, ppc64-diag_project ppc64-diag, suse linux_enterprise_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ppc64-diag | 2.7.1-5 |
| Debian 14 | ppc64-diag | 2.7.1-5 |
| Red Hat Enterprise Linux 6 | ppc64-diag | 0:2.6.7-4.el6 |
| Red Hat Enterprise Linux 6 | ppc64-diag-debuginfo | 0:2.6.7-4.el6 |
| Red Hat Enterprise Linux 7 | ppc64-diag | 0:2.6.7-6.el7 |
| Red Hat Enterprise Linux 7 | ppc64-diag-debuginfo | 0:2.6.7-6.el7 |