Cisco Unified Communications Manager Operating System-Level Privilege Escalation Vulnerability

A vulnerability in underlying file permissions of specific operating system-level commands of Cisco Unified Communications Manager Cisco Unified CM could allow an authenticated, local attacker to gain elevated privileges. The vulnerability is due to insufficient file permissions. An attacker coul...

ECSHOP background low-privileged sql injection-vulnerability warning-the black bar safety net

Brief description: ECSHOP background low permissionssql injectionone Detailed description: General Delivery clerk in the landing after just need a list of orders of permission, which is a low administrator can be injected to give the super pipe permissions As with file permissions, you can also...

CVE-2013-4331

Light Display Manager aka LightDM 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file...

[Lynis 1.4.0] Security and System Auditing Tool to Harden Linux Systems

Lynis is an auditing tool for Unix/Linux. It performs a security scan and determines the hardening state of the machine. Any detected security issues will be provided in the form of a suggestion or warning. Beside security related information it will also scan for general system information,...

CVE-2013-7135

CVE-2013-7135 affects the Perl Proc::Daemon module (version 0.14) and is triggered by world-writable permissions on the PID file, allowing local users to modify the file with unspecified impact. Public records (NVD, OSV, OSVUB, OpenVAS, Mageia/Fedora/Mageia advisories, FreeBSD VuXML) confirm this...

CVE-2013-7135

The Proc::Daemon module 0.14 for Perl uses world-writable permissions for a file that stores a process ID, which allows local users to have an unspecified impact by modifying this file...

KLA10319 Vulnerability in Secunia CSI Agent

Insecure file permissions were found in Secunia CSI Agent. By exploiting this vulnerability malicious users can change configurations. This vulnerability can be exploited locally via an XML config. Original advisories - Related products Secunia-CSI-Agent CVE list CVE-2013-5364 warning Solution...

CVE-2013-5371

The client in IBM Tivoli Storage Manager TSM 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System ReFS files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations...

Design/Logic Flaw

The client in IBM Tivoli Storage Manager TSM 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System ReFS files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations...

augeas: incorrect permissions set on newly created files

The transformsave function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors...

Ubuntu Update for samba USN-2054-1

Check for the Version of samba OpenVAS Vulnerability Test $Id: gbubuntuUSN20541.nasl 8672 2018-02-05 16:39:18Z teissa $ Ubuntu Update for samba USN-2054-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Ubuntu: Security Advisory (USN-2054-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-0348

CVE-2013-0348 affects thttpd/thttpd-derived sthttpd: versions prior to 2.26.4-r2 and 2.25b expose a world-readable /var/log/thttpd.log. The root cause is incorrect file permissions, permitting local users to read sensitive information from the log file. Implication: local information disclosure w...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 / 13.10 : samba vulnerabilities (USN-2054-1)

It was discovered that Winbind incorrectly handled invalid group names with the requiremembershipof parameter. If an administrator used an invalid group name by mistake, access was granted instead of having the login fail. CVE-2012-6150 Stefan Metzmacher and Michael Adam discovered that Samba...

USN-2054-1: Samba vulnerabilities

It was discovered that Winbind incorrectly handled invalid group names with the requiremembershipof parameter. If an administrator used an invalid group name by mistake, access was granted instead of having the login fail. CVE-2012-6150 Stefan Metzmacher and Michael Adam discovered that Samba...

CVE-2013-4006

IBM WebSphere Application Server WAS Liberty Profile 8.5 before 8.5.5.1 uses weak permissions for unspecified files, which allows local users to obtain sensitive information via standard filesystem operations...

CVE-2013-6689

Cisco Unified Communications Manager Unified CM 9.11 and earlier allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229...

Design/Logic Flaw

Cisco Unified Communications Manager Unified CM 9.11 and earlier allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229...

CVE-2013-6689

Cisco Unified Communications Manager (9.1(1) and earlier) is affected by CVE-2013-6689 where an authenticated, local attacker can bypass file permissions and read/modify/write arbitrary files by overloading a command-line utility (CSCui58229). The issue stems from insufficient input validation in...

CVE-2013-6689

Cisco Unified Communications Manager Unified CM 9.11 and earlier allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229...