CVE-2014-4039: PPC64-Diag Project PPC64-Diag

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf.

Affected products

• PPC64-Diag Project PPC64-Diag: version 2.6.1 only
• Red Hat Enterprise Linux Server: version 6.0 only; version 7.0 only
• Suse Linux Enterprise Server: version 11 only

Published 2014-06-17. Last modified 2026-06-17.