3787 matches found
[SA21686] xbiff2 Insecure File Permissions
TITLE: xbiff2 Insecure File Permissions SECUNIA ADVISORY ID: SA21686 VERIFY ADVISORY: http://secunia.com/advisories/21686/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: xbiff2 1.x http://secunia.com/product/11769/ DESCRIPTION: Thomas Wolff has...
Weak xbiff 2 file permissions
.xbiff2rc is world-readable, making it's possible to retrieve POP3 / IMAP account password...
CVE-2006-4439
pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions 755 or 777 if the pkgmap file contains a "?" question mark in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871...
[SA21633] Sun Solaris pkgadd Insecure File Permissions
TITLE: Sun Solaris pkgadd Insecure File Permissions SECUNIA ADVISORY ID: SA21633 VERIFY ADVISORY: http://secunia.com/advisories/21633/ CRITICAL: Less critical IMPACT: Manipulation of data, Privilege escalation WHERE: Local system OPERATING SYSTEM: Sun Solaris 10 http://secunia.com/product/4813/...
CVE-2006-3452
Adobe Reader and Acrobat on Mac OS X (versions 6.0.4 and earlier) are affected by insecure file and directory permissions that allow local users to gain privileges by overwriting the executable. The CVSS v2 base score is 4.6 (MEDIUM) with local access and low attack complexity. No explicit remedi...
CVE-2006-3452
Adobe Reader and Acrobat 6.0.4 and earlier, on Mac OSX, has insecure file and directory permissions, which allows local users to gain privileges by overwriting program files...
Panda Platinum Internet Security 2006/2007 privilege escalation and bayesian filter control
Title: Panda Platinum Internet Security 2006/2007 privilege escalation and bayesian filter control security vulnerabilities Author: 3APA3A Vendor: Panda Software Product: Panda Platinum Internet Security 2006 10.02.01 Panda Platinum Internet Security 2007 11.00.00 Panda Antivirus was not tested...
Exploit Labs Security Advisory 2006.4
EXPL-A-2006-004 exploitlabs.com Advisory 049 - - phpFormGenerator - AFFECTED PRODUCTS ================= phpFormGenerator v2.09 http://phpformgen.sourceforge.net/ OVERVIEW ======== phpFormGenerator is an easy-to-use tool to create reliable and efficient web forms in a snap. No programming of any...
MDKSA-2006:090 : shadow-utils
A potential security problem was found in the useradd tool when it creates a new user's mailbox due to a missing argument to the open call, resulting in the first permissions of the file being some random garbage found on the stack, which could possibly be held open for reading or writing before...
Ubuntu 5.04 / 5.10 : gdm vulnerabilitiy (USN-278-1)
Marcus Meissner discovered a race condition in gdm's handling of the /.ICEauthority file permissions. A local attacker could exploit this to become the owner of an arbitrary file in the system. When getting control over automatically executed scripts like cron jobs, the attacker could eventually...
Input validation
EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 allows local users to execute arbitrary code by replacing the Retrospect.exe file, possibly due to improper file permissions...
CVE-2006-2155
EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 allows local users to execute arbitrary code by replacing the Retrospect.exe file, possibly due to improper file permissions...
CVE-2006-2155
CVE-2006-2155 affects EMC Retrospect for Windows. Affected: EMC Retrospect 6.5 (versions up to 6.5.381), 7.0 (up to 7.0.343/344), and 7.5 (up to 7.5.1.105). The issue allows local users to execute arbitrary code by replacing the Retrospect.exe file, likely due to improper file permissions. KLA101...
CVE-2006-2155
EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 allows local users to execute arbitrary code by replacing the Retrospect.exe file, possibly due to improper file permissions...
CVE-2006-1892
avast! 4 Linux Home Edition 1.0.5 allows local users to modify permissions of arbitrary files via a symlink attack on the /tmp/avast4 temporary directory...
[SA19632] Sun Java Studio Enterprise Insecure File Permissions
TITLE: Sun Java Studio Enterprise Insecure File Permissions SECUNIA ADVISORY ID: SA19632 VERIFY ADVISORY: http://secunia.com/advisories/19632/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Sun Java Studio Enterprise 8.x http://secunia.com/product/9354/...
Design/Logic Flaw
NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file...
CVE-2006-1587
NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file...