CVE-2006-2155

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 allows local users to execute arbitrary code by replacing the Retrospect.exe file, possibly due to improper file permissions...

Input validation

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 allows local users to execute arbitrary code by replacing the Retrospect.exe file, possibly due to improper file permissions...

CVE-2006-2155

CVE-2006-2155 affects EMC Retrospect for Windows. Affected: EMC Retrospect 6.5 (versions up to 6.5.381), 7.0 (up to 7.0.343/344), and 7.5 (up to 7.5.1.105). The issue allows local users to execute arbitrary code by replacing the Retrospect.exe file, likely due to improper file permissions. KLA101...

CVE-2006-2155

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 allows local users to execute arbitrary code by replacing the Retrospect.exe file, possibly due to improper file permissions...

CVE-2006-1892

avast! 4 Linux Home Edition 1.0.5 allows local users to modify permissions of arbitrary files via a symlink attack on the /tmp/avast4 temporary directory...

[SA19632] Sun Java Studio Enterprise Insecure File Permissions

TITLE: Sun Java Studio Enterprise Insecure File Permissions SECUNIA ADVISORY ID: SA19632 VERIFY ADVISORY: http://secunia.com/advisories/19632/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Sun Java Studio Enterprise 8.x http://secunia.com/product/9354/...

Design/Logic Flaw

NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file...

CVE-2006-1587

NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file...

Multiple HP-UX vulnerabilities

It's possible to change file permissions recursively with 'usermod'. DoS with 'passwd'...

Samba < 3.0.22 Local File Permissions Credentials Disclosure

Binary data 3499.prm...

[SA19284] avast! Antivirus Insecure Default File Permissions

TITLE: avast! Antivirus Insecure Default File Permissions SECUNIA ADVISORY ID: SA19284 VERIFY ADVISORY: http://secunia.com/advisories/19284/ CRITICAL: Less critical IMPACT: Security Bypass, Manipulation of data, Privilege escalation WHERE: Local system SOFTWARE: avast! Antivirus 4.x...

CVE-2000-1239

The CVE describes a vulnerability in IBM Tivoli Management Framework 3.7.1 where the HTTP interface of the Tivoli Lightweight Client Framework (LCF) sets http_disable to 0 at install time. This allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data file...

CVE-2000-1239

The HTTP interface of Tivoli Lightweight Client Framework LCF in IBM Tivoli Management Framework 3.7.1 sets httpdisable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log...

Netcool NeuSecure Security information management platform multiple security vulnerabilities

Weak file permissions, cleartext passwords, passwords logging...

AVG 7 granting Everyone Full Control to updated files... even its drivers

There is more here: http://www.dslreports.com/forum/remark,15601404 Basically, a first time install of AVG 7 will have default permissions. Program FilesGrisoftAVG Free has inherited permissions from Program Files. This is preferred, because lower privileged accounts can't damage it. Once any fil...

AVG antivirus weak file permissions

Everyone:Full Control permission is set for files, including drivers, after update...

Noah's Classifieds 1.0/1.3 - Search Page SQL Injection

source: https://www.securityfocus.com/bid/16773/info Noah's Classifieds is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the application, access...

Command injection

Orbicule Undercover allows attackers with physical or root access to disable the protection by using the chmod command to change the permissions of the /private/etc/uc.app/Contents/MacOS/uc file, which prevents the service from being started in LaunchDaemon...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 rc.local Insecure File Permissions Vulnerability

QNX RTOS 6.3.0 rc.local Insecure File Permissions Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for use...

[SA18698] Adobe Products Insecure Default File Permissions

TITLE: Adobe Products Insecure Default File Permissions SECUNIA ADVISORY ID: SA18698 VERIFY ADVISORY: http://secunia.com/advisories/18698/ CRITICAL: Less critical IMPACT: Security Bypass, Manipulation of data, Privilege escalation WHERE: Local system SOFTWARE: Adobe Photoshop CS2...