xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
Affected Platforms
Xfsdump XfsdumpSuse Suse Linux Standard ServerSuse Suse Linux School ServerSuse Suse United LinuxSuse OpensuseSuse Suse Open Enterprise ServerSuse Suse Linux Openexchange ServerSuse Suse Linux