CVE-2006-5817

The CVE-2006-5817 entry concerns Parallels Desktop for Mac Build 1940, where the prl_dhcpd service stores DHCP configuration in /Library/Parallels/.dhcpd_configuration with insecure permissions (0666). This permits local users to modify the DHCP configuration, representing a local-impact vulnerab...

CVE-2006-5808

The installation of Cisco Secure Desktop CSD before 3.1.1.45 uses insecure default permissions all users full control for the CSD directory and its parent directory, which allow local users to gain privileges by replacing CSD executables, aka "Local Privilege Escalation"...

CVE-2006-5663

IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit CSDK 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which allows local users to gain privileges by modifying the scripts...

CVE-2006-5600

Axalto Protiva 1.1, possibly only non-commercial versions, stores passwords in plaintext in files with insecure permissions, which allows local users to gain privileges by reading the passwords from 1 KeyTool\keytool.config or 2 webapps\protiva\WEB-INF\classes\authserver.config...

CVE-2006-5600

Axalto Protiva 1.1 (possibly non-commercial versions) stores passwords in plaintext in files with insecure permissions. Local attackers can gain privileges by reading sensitive data from (1) KeyTool\keytool.config or (2) webapps\protiva\WEB-INF\classes\authserver.config. Root cause appears to be ...

CVE-2006-5600

Axalto Protiva 1.1, possibly only non-commercial versions, stores passwords in plaintext in files with insecure permissions, which allows local users to gain privileges by reading the passwords from 1 KeyTool\keytool.config or 2 webapps\protiva\WEB-INF\classes\authserver.config...

QNX RTOS 6.3.0 Insecure rc.local Permissions Plus System Crash Exploit

No description provided by source. !/bin/sh this combines http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387 and http://www.idefense.com/intelligence/vulnerabilities/display.php?id=386 into local r00t w00t t00t t00t, hugs and kisses from www.lort.dk. unset PAGER; man chmod |...

IBM Lotus Notes sets insecure default permissions on program data

Overview IBM Lotus Notes sets insecure default permissions on the Notes directory. This vulnerability may allow a local attacker to gain unintended access to Lotus Notes program data. Description IBM Lotus Notes installs numerous program files and program data in a special directory known as the...

CVE-2006-5406

Passgo Defender 5.2 creates the application directory with insecure permissions Everyone/Full Control, which allows local users to read and modify sensitive files. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-5406

Passgo Defender 5.2 creates the application directory with insecure permissions Everyone/Full Control, which allows local users to read and modify sensitive files. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2005-2454

IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions Everyone/Full Control for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder...

CVE-2006-5072

The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack...

CVE-2006-5072

The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack...

CVE-2006-5072

CVE-2006-5072 concerns Mono’s System.CodeDom.Compiler usage, where temporary files are created with insecure permissions, enabling a local attacker to overwrite arbitrary files or inject/execute code via a symlink attack. The vulnerability affects Mono implementations across multiple distros, wit...

CVE-2006-5072

The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack...

CVE-2006-5072

The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack...

CVE-2006-5163

IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack...

CVE-2006-5163

IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux (and possibly other versions) is affected by CVE-2006-5163, which creates /tmp/installserver.txt with insecure permissions, enabling local users to perform a symlink attack to append data to arbitrary files. This is the concrete vulnerability ...

CVE-2006-4439

pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions 755 or 777 if the pkgmap file contains a "?" question mark in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871...

Design/Logic Flaw

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions Everyone/Full Control for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files...