4322 matches found
[SA15894] SSH Tectia Server Insecure Private Key Permissions
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2002-1672
Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions world readable, which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials...
CVE-2002-1672
Webmin 0.92 (RPM install) creates /var/webmin with world-readable permissions, enabling local users to read the root cookie-based authentication credentials and potentially hijack the root session. The issue is documented in CVE-2002-1672 and corroborated by multiple sources (NVD/Nessus). Affecte...
SilverCity: Insecure file permissions
Background SilverCity provides lexical analysis for over 20 programming and markup languages. Description The SilverCity package installs three executable files with insecure permissions. Impact A local attacker could modify the executable files, causing arbitrary code to be executed with the...
CVE-2004-2126
The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as 1 blackice.ini, 2 firewall.ini, 3 protect.ini, or 4 sigs.ini, which allows local users to modify BlackICE configuration or possibly execute arbitrary code by exploiting vulnerabilities in the...
CVE-2005-1675
Groove Virtual Office and Groove Workspace suffer from insecure installation-directory permissions (EVERYBODY) that allow local users to access sensitive information. Affected products include Groove Virtual Office < 3.1 build 2338, Groove Virtual Office < 3.1a build 2364, and Groove Worksp...
[Full-disclosure] [ GLSA 200505-17 ] Qpopper: Multiple Vulnerabilities
Gentoo Linux Security Advisory GLSA 200505-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
CVE-2004-2092
eTrust InoculateIT for Linux 6.0 uses insecure permissions for multiple files and directories, including the application's registry and tmp directories, which allows local users to delete, modify, or examine sensitive information...
CVE-2005-1636
CVE-2005-1636 affects MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4. The mysql_install_db script creates a temporary file (mysql_install_db.X) with a predictable name and insecure permissions, enabling a local user to modify the file and execute arbitrary SQL commands during installation. Remedia...
CVE-2005-1636
mysqlinstalldb in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysqlinstalldb.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents...
CVE-2005-1636
mysqlinstalldb in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysqlinstalldb.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents...
CVE-2005-1399
CVE-2005-1399 affects FreeBSD 4.6–4.11 and 5.x–5.4, where insecure default permissions on the /dev/iir device allow unprivileged local users to issue restricted ioctl calls to access or modify data on hardware managed by the iir driver. This results in partial impacts to confidentiality, integrit...
CVE-2005-1399
FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver...
CVE-2005-1399
FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver...
CVE-2005-1430
Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty pty that is managed by a non-setuid program, which allows local users to read or modify sessions of other users...
CVE-2005-1430
The CVE-2005-1430 issue affects Mac OS X 10.3.x and earlier. The vulnerability arises from insecure permissions on a pseudo terminal (pty) that is managed by a non-setuid program, allowing local users to read or modify other users’ sessions. Public documents do not specify affected versions beyon...
CVE-2005-1430
Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty pty that is managed by a non-setuid program, which allows local users to read or modify sessions of other users...
Linux kernel it87 and via686a drivers DoS
Insecure permissions lead to ability of resource exhaustion...
insecure user account lam-runtime-7.0.6-2mdk rpm
Serverity: HIGH I found a bug when lam-runtime-7.0.6-2mdk is installed it creates a new user/group with insecure permissions. BUG: user "mpi" is created without a password which can be used to compromise a system. rpm -qf /var/lib/mpi/testmpi.lam lam-runtime-7.0.6-2mdk FIX: Either lock the accoun...