Default configuration

Folder Manager in Apple Mac OS X 10.5.6 uses insecure default permissions when recreating a Downloads folder after it has been deleted, which allows local users to bypass intended access restrictions and read the Downloads folder...

CVE-2009-0014

Folder Manager in Apple Mac OS X 10.5.6 uses insecure default permissions when recreating a Downloads folder after it has been deleted, which allows local users to bypass intended access restrictions and read the Downloads folder...

Gentoo Security Advisory GLSA 200504-30 (phpmyadmin)

The remote host is missing updates announced in advisory GLSA 200504-30. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200505-17 (qpopper)

The remote host is missing updates announced in advisory GLSA 200505-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200505-17 (qpopper)

The remote host is missing updates announced in advisory GLSA 200505-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: mysql-server

The remote host is missing an update to the system as announced in the referenced advisory. VID eeae6cce-d05c-11d9-9aed-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Perl - rmtree() Function Local Insecure Permissions

Perl - rmtree Function Local Insecure Permissions source: https://www.securityfocus.com/bid/29902/info Computers running Perl are prone to a local vulnerability that occurs when handling symbolic links. Attackers can leverage this issue to change the permissions of arbitrary files. Perl 5.10.0 is...

Ruby CGI Session Management Insecure File Permission Vulnerability

Overview Ruby uses CGI::Session's FileStore. FileStore creates a session file with improper permission and this could lead to session information leak. Impact An attacker could hijack sessions utilizing stolen information. Solution Please refer to the 'Vendor Information' section for official...

CVE-2008-1970

muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials...

Default credentials

muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials...

Nik Software Sharpener Pro vulnerable to privilege escalation

Overview The Nik Software Shapener Pro installs files with insecure permissions, which may allow a local attacker to elevate privileges. Description Nik Software Sharpener Pro is an Adobe Photoshop plug-in that provides image sharpening capabilities. The Nik Software Sharpener Pro installer sets...

CVE-2008-0889

Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script...

server: insecure permissions on fedora/redhat-idm-console

Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script...

CVE-2008-0890

Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors...

Code injection

Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors...

CVE-2008-0890

Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors...

CVE-2008-0890

CVE-2008-0890 affects Red Hat Directory Server 7.1 prior to SP4. The issue is insecure permissions on certain directories that allow a local user to replace Java ARchive (JAR) files and execute arbitrary code with the server’s privileges. The official Red Hat advisory RHSA-2008:0173 documents the...

CVE-2008-0931

wexport.c in XWine 1.0.1 on Debian GNU/Linux sets insecure permissions 0666 for /etc/wine/config, which might allow local users to execute arbitrary commands or cause a denial of service by modifying the file...

CVE-2008-0931

CVE-2008-0931 affects XWine (Debian package) and is triggered by the xwine command changing the global WINE configuration file permissions to world-writable (0666) on Debian GNU/Linux. This local vulnerability could allow a local user to edit /etc/wine/config and cause arbitrary commands to be ex...

CVE-2008-0931

wexport.c in XWine 1.0.1 on Debian GNU/Linux sets insecure permissions 0666 for /etc/wine/config, which might allow local users to execute arbitrary commands or cause a denial of service by modifying the file...