CVE-2005-3321

chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is deleted or replaced, which is then modified by chkstat to use weaker permissions...

Insecure Temporary Files in BMC/Control-M Agent

BMC's Control M is an enterprise scheduling facility. Unfortunately, the agent software suffers from a problem with insecure temporary file creation. We noticed the problem on Solaris systems running the version 6.1.03 with current patches; it is reasonable to assume that other OS platforms and...

YIFF server sound files unauthorized access

File permissions are ignored while playing file...

GLSA-200510-13 : SPE: Insecure file permissions

The remote host is affected by the vulnerability described in GLSA-200510-13 SPE: Insecure file permissions It was reported that due to an oversight all SPE's files are set as world-writeable. Impact : A local attacker could modify the executable files, causing arbitrary code to be executed with...

SPE: Insecure file permissions

Background SPE is a cross-platform Python Integrated Development Environment IDE. Description It was reported that due to an oversight all SPE's files are set as world-writeable. Impact A local attacker could modify the executable files, causing arbitrary code to be executed with the permissions ...

Debian DSA-846-1 : cpio - several vulnerabilities

Two vulnerabilities have been discovered in cpio, a program to manage archives of files. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1111 Imran Ghory discovered a race condition in setting the file permissions of files extracted from cpio...

[SECURITY] [DSA 846-1] New cpio packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 846-1 [email protected] http://www.debian.org/security/ Martin Schulze October 7th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 846-1] New cpio packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 846-1 [email protected] http://www.debian.org/security/ Martin Schulze October 7th, 2005 http://www.debian.org/security/faq -...

ntlmaps NTLM proxy weak file permissions

Configuration file with Windows account password is world readable...

[SA16541] Adobe Version Cue VCNative Privilege Escalation

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[security bulletin] SSRT4874 rev.0 - HP-UX Ignite-UX Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01219 REVISION: 0 SSRT4874 rev.0 - HP-UX Ignite-UX Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. INITIAL RELEASE: 15 August 2005 POTENTIAL SECURITY...

CVE-2004-2303

CVE-2004-2303 affects MTools Mformat prior to 3.9.9. When installed setuid root, mformat can create files with world-readable and world-writable permissions, enabling local users to read and overwrite files. Root cause is the setuid root usage and permissive file creation. In Mandrake/MKSA adviso...

Kaspersky Antivirus for Unix / Linux weak default file permissions

Weak folder permissions allow to overwrite any system file with symlink attack...

[Full-disclosure] Root exploit in Lantonix Secure Console Server

/ $ An open security advisory 11 - Lantronix SCS Local Root Exploits 1: Bug Researcher: c0ntex - c0ntexbatgmail.com || [email protected] 2: Bug Released: August 05 2005 3: Bug Impact Rate: Hi 4: Bug Scope Rate: Local $ This advisory and/or proof of concept code must not be used for...

Multiple Lantronix SecureLinx console server vulnerabilities

SSH keys and log files are accessible through Web interface. Unsfae file permissions. Directory traversal. Privilege escalations, buffer overflows...

CVE-2005-2475

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete...

CVE-2005-2475

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete...

DEBIAN-CVE-2005-2475

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete...

CVE-2005-2475

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete...

USN-150-1: KDE library vulnerability

Kate and Kwrite create a backup file before saving a modified file. These backup files were created with default permissions, even if the original file had more strict permissions set, so that other local users could possibly read the backup file even if they are not permitted to read the origina...