CVE-2004-1714

CVE-2004-1714 affects BlackICE PC Protection and Server Protection. The issue arises from installation of firewall.ini, blackice.ini, sigs.ini, and protect.ini with Everyone Full Control permissions, enabling a local attacker to crash the service or modify configuration by editing firewall.ini (e...

Mandrake Linux Security Advisory : openldap (MDKSA-2002:013)

A problem exists in all versions of OpenLDAP from 2.0.0 through 2.0.19 where permissions are not properly checked using access control lists when a user tries to remove an attribute from an object in the directory by replacing it's values with an empty list. Schema checking is still enforced, so ...

CVE-2001-0006

The CVE-2001-0006 issue affects Windows NT 4.0 (and Terminal Server Edition) where the Winsock2ProtocolCatalogMutex has insecure Everyone/Full Control permissions. This allows a local user to modify the ACL to “No Access,” effectively disabling Winsock network connectivity and causing a denial of...

CVE-2000-1106

Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions to the Everyone group, which allows attackers to gain privileges by modifying the VirusWall programs...

TrendMicro InterScan VirusWall shared folder problem

I could not find any reference to this particular issue on bugtraq, and as it seems rather serious I decided to submit it. This message concerns what seems to be a security 'feature' in all versions of InterScan SMTP VirusWall for Windows NT at least through version 3.4. The problem is not with t...

CVE-1999-1555

Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows local users to cause Inoculan's antivirus update feature to install a Trojan horse dll...

Cheyenne Inoculan for Windows NT 4.0 - Share

Cheyenne Inoculan for Windows NT 4.0 - Share source: https://www.securityfocus.com/bid/106/info It is possible to run arbitrary code on any Intel machine running Cheyenne Inoculan version 4.0 for Windows NT prior to SP2. Inoculan runs as a service, called "Cheyenne InocuLAN Anti-Virus Server". Wh...