Skip to content
OpenAdvisories

Archive

15 March 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.3

    Password exposed in process listing

    In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provision, allowing local attackers to read them in the process list

  • Low 2.2

    Static tempfile name allows overwriting of arbitrary files

    In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection