Insecure file permissions in the Firefox browser for Linux >= v0.9

after installing firefox many of the permissions are set to 777, allowing anyone on the system to change the contents of the executable files. this first occured in the 0.9 release in the tar.gz release as well as in the installer. the problem or is it called a feature now? still exists in the...

Mozilla/Firefox Linux Installation Arbitrary File Overwrite (deprecated)

Binary data 2281.prm...

serverview 3.0 - insecure file permissions

date: 06.09.2004 author: l0om - l0om at excluded d0t org - www.excluded.org product: serverview problem: insecure file permissions version: 3.0??? serverview is a server management product from fujitsu siemens which is shipped with every PRIMERGY server. it is based on snmp an let you view and se...

GLSA-200409-08 : Ruby: CGI::Session creates files insecurely

The remote host is affected by the vulnerability described in GLSA-200409-08 Ruby: CGI::Session creates files insecurely The CGI::Session::FileStore implementation and presumably CGI::Session::PStore, which allow data associated with a particular Session instance to be written to a file, writes t...

Ruby: CGI::Session creates files insecurely

Background Ruby is an Object Oriented, interpreted scripting language used for many system scripting tasks. It can also be used for CGI web applications. Description The CGI::Session::FileStore implementation and presumably CGI::Session::PStore, which allow data associated with a particular Sessi...

GLSA-200407-16 : Linux Kernel: Multiple DoS and permission vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200407-16 Linux Kernel: Multiple DoS and permission vulnerabilities The Linux kernel allows a local attacker to mount a remote file system on a vulnerable Linux host and modify files' group IDs. On 2.4 series kernels this...

CVE-2004-1724

The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusionadmin/dbbackups directory to world read/write/execute 777, which allows remote attackers to download or view database backups, which have easily guessable filenames and contain the administrator userna...

FreeBSD : Ruby insecure file permissions in the CGI session management (e811aaf1-f015-11d8-876f-00902714cc7c)

According to a Debian Security Advisory : Andres Salomon noticed a problem in the CGI session management of Ruby, an object-oriented scripting language. CGI::Session's FileStore and presumably PStore ... implementations store session information insecurely. They simply create files, ignoring...

[SECURITY] [DSA 537-1] New Ruby packages fix insecure CGI session management

-------------------------------------------------------------------------- Debian Security Advisory DSA 537-1 [email protected] http://www.debian.org/security/ Martin Schulze August 16th, 2004 http://www.debian.org/security/faq -...

Ruby insecure file permissions in the CGI session management

According to a Debian Security Advisory: Andres Salomon noticed a problem in the CGI session management of Ruby, an object-oriented scripting language. CGI::Session's FileStore and presumably PStore ... implementations store session information insecurely. They simply create files, ignoring...

DSA-537 ruby - insecure file permissions

Bulletin has no description...

ISS BlackICE/PC Protection Unprivileged User Local DoS

ISS BlackICE is a personal Firewall/IDS for windows Desktops. Based on the version number, the remote BlackICE install is vulnerable to a local attack due to incorrect file permissions. Nessus based the results of this test on the contents of the local BlackICE configuration file. C Tenable Netwo...

PT-2004-2618 · Unknown · Blackice Server Protection +1

Name of the Vulnerable Software and Affected Versions: BlackICE PC Protection and Server Protection affected versions not specified Description: The issue allows local users to cause a denial of service or modify configuration due to the installation of certain files with Everyone Full Control...

Mandrake Linux Security Advisory : mtools (MDKSA-2004:016)

Sebastian Krahmer found that the mformat program, when installed suid root, can create any file with 0666 permissions as root, and that it also does not drop privileges when reading local configuration files. The updated packages remove the suid bit from mformat. %NASLMINLEVEL 70300 C Tenable...

Important: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages that fix telnet URI handler and mailto URI handler file vulnerabilities are now available. The kdelibs packages include libraries for the K Desktop Environment. KDE Libraries include: kdecore KDE core library, kdeui user interface, kfm file manager, khtmlw HTML widget, ki...

CVE-2003-0618

Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files for which the user does not have appropriate permissions...

CVE-2003-0618

Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files for which the user does not have appropriate permissions...

CVE-2003-0618

Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files for which the user does not have appropriate permissions...

InnoculateIT weak file permissions

Weak directory permissions, symbolic links problems...

----------========== OPEN3S-2003-08-08-eng-informix-onedcu ==========----------

----------========== OPEN3S-2003-08-08-eng-informix-onedcu ==========---------- Title: Local Vulnerability in IBM Informix IDSv9.40 onedcu binary Date: 08-08-2003 Platform: Only tested in Linux but can be exported to others. Impact: Users with exec perm over ./bin/onedcu can create files with 666...