[SA19284] avast! Antivirus Insecure Default File Permissions

TITLE: avast! Antivirus Insecure Default File Permissions SECUNIA ADVISORY ID: SA19284 VERIFY ADVISORY: http://secunia.com/advisories/19284/ CRITICAL: Less critical IMPACT: Security Bypass, Manipulation of data, Privilege escalation WHERE: Local system SOFTWARE: avast! Antivirus 4.x...

CVE-2000-1239

The HTTP interface of Tivoli Lightweight Client Framework LCF in IBM Tivoli Management Framework 3.7.1 sets httpdisable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log...

CVE-2000-1239

The CVE describes a vulnerability in IBM Tivoli Management Framework 3.7.1 where the HTTP interface of the Tivoli Lightweight Client Framework (LCF) sets http_disable to 0 at install time. This allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data file...

Netcool NeuSecure Security information management platform multiple security vulnerabilities

Weak file permissions, cleartext passwords, passwords logging...

AVG 7 granting Everyone Full Control to updated files... even its drivers

There is more here: http://www.dslreports.com/forum/remark,15601404 Basically, a first time install of AVG 7 will have default permissions. Program FilesGrisoftAVG Free has inherited permissions from Program Files. This is preferred, because lower privileged accounts can't damage it. Once any fil...

AVG antivirus weak file permissions

Everyone:Full Control permission is set for files, including drivers, after update...

Noah's Classifieds 1.0/1.3 - Search Page SQL Injection

source: https://www.securityfocus.com/bid/16773/info Noah's Classifieds is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the application, access...

Command injection

Orbicule Undercover allows attackers with physical or root access to disable the protection by using the chmod command to change the permissions of the /private/etc/uc.app/Contents/MacOS/uc file, which prevents the service from being started in LaunchDaemon...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 rc.local Insecure File Permissions Vulnerability

QNX RTOS 6.3.0 rc.local Insecure File Permissions Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for use...

[SA18698] Adobe Products Insecure Default File Permissions

TITLE: Adobe Products Insecure Default File Permissions SECUNIA ADVISORY ID: SA18698 VERIFY ADVISORY: http://secunia.com/advisories/18698/ CRITICAL: Less critical IMPACT: Security Bypass, Manipulation of data, Privilege escalation WHERE: Local system SOFTWARE: Adobe Photoshop CS2...

Mandrake Linux Security Advisory : kernel (MDKSA-2005:235)

Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in this update : A stack-based buffer overflow in the sendmsg function call in versions prior to 2.6.13.1 allow local users to execute arbitrary code by calling sendmsg and modifying the message contents in anothe...

cpio -- multiple vulnerabilities

Problem description: A number of issues has been discovered in cpio: When creating a new file, cpio closes the file before setting its permissions. CVE-2005-1111 When extracting files cpio does not properly sanitize file names to filter out ".." components, even if the --no-absolute-filenames...

[ GLSA 200601-01 ] pinentry: Local privilege escalation

Gentoo Linux Security Advisory GLSA 200601-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2005-2932

Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls...

CVE-2005-3631

The CVE-2005-3631 issue affects udev, where permissions on certain files under /dev/input were not set correctly. The root cause is flawed permission handling in udev, allowing a local attacker to potentially view sensitive data entered at the console (e.g., passwords). Public references in Red H...

Trend Micro PC-Cillin Internet Security antivirus / firewall weak file permissions

No description provided...

exponentCMS.txt

A number of security issues have been discovered in ExponentCMS ------------------------------------------------------------------------ --------------------- Exponent is a fully-featured, modern CMS written in PHP, that enables non-technical people to manage and update their websites with minima...

linux/x86 read(0,buf,2541); chmod(buf,4755); 23 bytes

Exploit for linux/x86 platform in category shellcode ===================================================== linux/x86 read0,buf,2541; chmodbuf,4755; 23 bytes ===================================================== / readnchmod-core.c by Charles Stevenson Example of strace output if you pass in...

CVE-2005-3321

chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is deleted or replaced, which is then modified by chkstat to use weaker permissions...

Insecure Temporary Files in BMC/Control-M Agent

BMC's Control M is an enterprise scheduling facility. Unfortunately, the agent software suffers from a problem with insecure temporary file creation. We noticed the problem on Solaris systems running the version 6.1.03 with current patches; it is reasonable to assume that other OS platforms and...