Privilege escalation

Adobe Download Manager versions 2.0.0.363 have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2019-8071

CVE-2019-8071 pertains to Adobe Download Manager 2.0.0.363 and involves an insecure file-permission vulnerability that could allow privilege escalation. Public sources in the connected documents consistently describe an impact of elevating privileges on affected Windows systems. The root cause is...

CVE-2019-8071

Adobe Download Manager versions 2.0.0.363 have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation...

Adobe Download Manager Insecure File Permissions Vulnerability

Adobe Download Manager is an application for managing and downloading Adobe products from Adobe USA. A security vulnerability exists in version 2.0.0.363 of Adobe Download Manager for Windows-based platforms. An attacker can exploit the vulnerability to elevate privileges...

netaddr before 1.5.3 and 2.0.4 has Incorrect Default Permissions

The netaddr gem before 1.5.3 and 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem...

netaddr world-writeable file permissions

The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem...

Insecure File Permissions

netaddr uses insecure file permissions. Certain Ruby files are configured with excessive permissions -rwxrwxrwx during GEM install, which would allow a local attacker to modify the files and execute arbitrary code...

Design/Logic Flaw

The PKI keys exported using the command "run request security pki key-pair export" on Junos OS may have insecure file permissions. This may allow another user on the Junos OS device with shell access to read them. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D18...

CVE-2019-0073 Junos OS: PKI key pairs are exported with insecure file permissions

The PKI keys exported using the command "run request security pki key-pair export" on Junos OS may have insecure file permissions. This may allow another user on the Junos OS device with shell access to read them. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D18...

CVE-2019-0073

CVE-2019-0073 describes a local vulnerability in Juniper Networks Junos OS where PKI keys exported via the command run request security pki key-pair export may have insecure file permissions. This could allow a local user with shell access to read those keys. Affected releases include Junos OS 15...

CVE-2019-17383

The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem...

CVE-2019-17383

The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem...

Design/Logic Flaw

The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem...

CVE-2019-17383

The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem...

CVE-2019-17383

CVE-2019-17383 affects the Ruby netaddr gem prior to 2.0.4, where misconfigured file permissions during gem installation can result in 0777 permissions on the target filesystem. This issue is documented in multiple sources with consistent description: a gem install could create widely permissive ...

CVE-2019-17383

The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem...

CVE-2019-17383

The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem...

Juniper Junos CVE-2019-0073 Local Insecure File Permissions Vulnerability

Description Juniper Junos is prone to a local insecure file-permission vulnerability. A local attacker can exploit this issue to access sensitive information stored in the file-system. The following versions of Junos are vulnerable. Juniper Junos 15.1X49 versions prior to 15.1X49-D180 Juniper Jun...

CheckPoint Endpoint Security Client/ZoneAlarm 15.4.062.17802 - Privilege Escalation Vulnerability

Exploit Title: CheckPoint Endpoint Security Client/ZoneAlarm 15.4.062.17802 - Privilege Escalation Exploit Author: Jakub Palaczynski Vendor Homepage: https://www.checkpoint.com/ Version: Check Point Endpoint Security VPN = E80.87 Build 986009514 Version: Check Point ZoneAlarm = 15.4.062.17802 CVE...

CheckPoint Endpoint Security Client/ZoneAlarm 15.4.062.17802 - Privilege Escalation

Exploit Title: CheckPoint Endpoint Security Client/ZoneAlarm 15.4.062.17802 - Privilege Escalation Date: 2019-01-30 Exploit Author: Jakub Palaczynski Vendor Homepage: https://www.checkpoint.com/ Version: Check Point Endpoint Security VPN = E80.87 Build 986009514 Version: Check Point ZoneAlarm =...