CVE-2009-2091

The System Management/Repository component in IBM WebSphere Application Server WAS 7.0 before 7.0.0.5 on z/OS uses weak file permissions for new applications, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2009-2091

The System Management/Repository component in IBM WebSphere Application Server WAS 7.0 before 7.0.0.5 on z/OS uses weak file permissions for new applications, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2009-2091

CVE-2009-2091 affects IBM WebSphere Application Server 7.0 on z/OS prior to 7.0.0.5. The issue is in the System Management/Repository component, which uses weak file permissions for new applications, allowing remote attackers to obtain sensitive information via unspecified vectors. The vulnerabil...

openSUSE Security Update : kpartx (kpartx-613)

This update improves the file permissions on the socket file. CVE-2009-0115 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kpartx-613. The text description of this plugin is C SUSE LLC...

Design/Logic Flaw

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges...

AIX 6.1 TL 2 : bos.rte.cron (U825550)

The remote host is missing AIX PTF U825550, which is related to the security of the package bos.rte.cron. The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root. The following...

Design/Logic Flaw

The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact...

DEBIAN-CVE-2008-6756

ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file...

DEBIAN-CVE-2008-6755

ZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and sets the permissions to 0600, which makes it easier for remote attackers to modify this file by accessing it through a 1 PHP or 2 CGI script...

CVE-2008-6756

ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file...

IBM WebSphere Application Server < 6.0.2.33 Multiple Vulnerabilities

IBM WebSphere Application Server 6.0.2 before Fix Pack 33 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - Provided an attacker has valid credentials, it may be possible to hijack an authenticated session. PK66676 - The PerfServlet code...

[SECURITY] [DSA 1767-1] New multipath-tools packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1767-1 [email protected] http://www.debian.org/security/ Nico Golde April 9th, 2009 http://www.debian.org/security/faq -...

IBM WebSphere Application Server 7.0 < Fix Pack 3

IBM WebSphere Application Server 7.0 before Fix Pack 3 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - Under certain conditions it may be possible to access administrative console user sessions. PK74966 - The administrative console is...

[SECURITY] [DSA 1767-1] New multipath-tools packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1767-1 [email protected] http://www.debian.org/security/ Nico Golde April 9th, 2009 http://www.debian.org/security/faq -...

Remote access vulnerability using File Thingie v2.5.4

============================================================ !vuln File Thingie v2.5.4 Previous versions may also be affected. ============================================================ ============================================================ !risk Low There are currently just a few website...

CVE-2009-1214

CVE-2009-1214 affects GNU screen 4.0.3, which creates the /tmp/screen-exchange temporary file with world-readable permissions, enabling local users to potentially obtain sensitive session information (confidentiality impact: COMPLETE). The issue is local, due to permissive file mode, and is corro...

nss-ldapd Weak file permissions

/etc/nss-ldapd.conf flie with LDAP password is world readable...

openSUSE 10 Security Update : kpartx (kpartx-6082)

This update improves the file permissions on the socket file. CVE-2009-0115 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kpartx-6082. The text description of this plugin is C SUSE LLC...

CVE-2009-0874

Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allow local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones relat...

CVE-2009-0875

Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allows local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is...