CVE-2014-4039
ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict...
ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf.
Exploit likelihood
What each source reports
NVD Score used
ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf.
- Record
CVE-2014-4039- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf.
- Record
CVE-2014-4039- Updated
- 2026-11-02
EUVDEUVD-2014-3970 No score
ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf.
- Record
EUVD-2014-3970- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ccg6-gvwm-fgpg No score
ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict...
ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf.
- Record
GHSA-ccg6-gvwm-fgpg- Updated
- 2026-11-02
OSV No score
ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf.
- Record
CVE-2014-4039- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-4039 No score
ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf.
- Record
DEBIAN-CVE-2014-4039- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ppc64-diagDebian:12 |
before 2.7.1-5 | 2.7.1-5 |
ppc64-diagDebian:14 |
before 2.7.1-5, plus listed versions 2.7.1-12.7.1-22.7.1-32.7.1-4 |
2.7.1-5 |
ppc64-diagRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.6.7-6.el7 | 0:2.6.7-6.el7 |
ppc64-diag-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.6.7-6.el7 | 0:2.6.7-6.el7 |
ppc64-diagRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.7-4.el6 | 0:2.6.7-4.el6 |
ppc64-diag-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.6.7-4.el6 | 0:2.6.7-4.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-4039 is a low vulnerability (CVSS 2.1) in Ppc64-diag Project Ppc64-diag, published June 17, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in ppc64-diag 2.7.1-5.
References
rhn.redhat.com/errata/RHSA-2015-1320.html
openwall.com/lists/oss-security/2014/06/17/1
bugzilla.redhat.com/show_bug.cgi?id=1109371
secunia.com/advisories/60616
lists.opensuse.org/opensuse-security-announce/2014-07/msg00018.html
Show 15 moreShow less
securityfocus.com/bid/68086
nvd.nist.gov/vuln/detail/CVE-2014-4039
github.com/advisories/GHSA-ccg6-gvwm-fgpg
security-tracker.debian.org/tracker/CVE-2014-4039
access.redhat.com/errata/RHSA-2015:0383
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0383.json
cve.org/CVERecord?id=CVE-2014-4038