Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

ubuntu логотип

CVE-2026-35367

4 месяца назад

The nohup utility in uutils coreutils creates its default output file, nohup.out, without specifying explicit restricted permissions. This causes the file to inherit umask-based permissions, typically resulting in a world-readable file (0644). In multi-user environments, this allows any user on the system to read the captured stdout/stderr output of a command, potentially exposing sensitive information. This behavior diverges from GNU coreutils, which creates nohup.out with owner-only (0600) permissions.

CVSS3: 3.3
EPSS: Низкий
nvd логотип

CVE-2026-35367

4 месяца назад

The nohup utility in uutils coreutils creates its default output file, nohup.out, without specifying explicit restricted permissions. This causes the file to inherit umask-based permissions, typically resulting in a world-readable file (0644). In multi-user environments, this allows any user on the system to read the captured stdout/stderr output of a command, potentially exposing sensitive information. This behavior diverges from GNU coreutils, which creates nohup.out with owner-only (0600) permissions.

CVSS3: 3.3
EPSS: Низкий
debian логотип

CVE-2026-35367

4 месяца назад

The nohup utility in uutils coreutils creates its default output file, ...

CVSS3: 3.3
EPSS: Низкий
github логотип

GHSA-5hgf-628x-mcqf

4 месяца назад

uutils coreutils has an Incorrect Permission Assignment for Critical Resource

CVSS3: 3.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-35367

The nohup utility in uutils coreutils creates its default output file, nohup.out, without specifying explicit restricted permissions. This causes the file to inherit umask-based permissions, typically resulting in a world-readable file (0644). In multi-user environments, this allows any user on the system to read the captured stdout/stderr output of a command, potentially exposing sensitive information. This behavior diverges from GNU coreutils, which creates nohup.out with owner-only (0600) permissions.

CVSS3: 3.3
0%
Низкий
4 месяца назад
nvd логотип
CVE-2026-35367

The nohup utility in uutils coreutils creates its default output file, nohup.out, without specifying explicit restricted permissions. This causes the file to inherit umask-based permissions, typically resulting in a world-readable file (0644). In multi-user environments, this allows any user on the system to read the captured stdout/stderr output of a command, potentially exposing sensitive information. This behavior diverges from GNU coreutils, which creates nohup.out with owner-only (0600) permissions.

CVSS3: 3.3
0%
Низкий
4 месяца назад
debian логотип
CVE-2026-35367

The nohup utility in uutils coreutils creates its default output file, ...

CVSS3: 3.3
0%
Низкий
4 месяца назад
github логотип
GHSA-5hgf-628x-mcqf

uutils coreutils has an Incorrect Permission Assignment for Critical Resource

CVSS3: 3.3
0%
Низкий
4 месяца назад

Уязвимостей на страницу