Ppc64-Diag Project Ppc64-Diag
2 CVEs affecting Ppc64-Diag Project Ppc64-Diag. Latest disclosed: 2014-06-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-4039 | | 2014-06-17 | ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local user… | |
CVE-2014-4038 | | 2014-06-17 | ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) script… |