4255 matches found
CVE-1999-1325
SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges...
CVE-2000-0100
The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program...
CVE-1999-1092
tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file...
CVE-1999-1345
AutoFTP.pl script in AutoFTP 0.2 uses the /tmp/ftptmp as a shared directory with insecure permissions, which allows local users to 1 send arbitrary files to the remote server by placing them in the directory, and 2 view files that are being transferred...
wordperfect8.txt
Date: Fri, 18 Dec 1998 11:47:45 -0500 From: Edsel Adap Reply-To: Bugtraq List To: [email protected] Subject: wordperfect 8 for linux security Hi, I sent a similar message to Corel about this. And I figured I'd send it out here in order to prevent people from opening up their systems by...
CVE-1999-1019
SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable processd with a Trojan horse, facilitating a root or Administrator compromise...
PT-1999-1179 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns inappropriate permissions for system-critical data in an anonymous FTP account. This includes the root directory being writeable by anyone, the ability to obtain ...
CVE-1999-1403
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions world-readable and world-writable, which could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files...
Slackware Linux 3.4 - 'liloconfig-color' Temporary File
source: https://www.securityfocus.com/bid/77/info liloconfig-color creates the file /tmp/reply insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/reply to any file and wait for root to run the program. This will clober the target file. The file created has...
CVE-1999-1275
Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges...
CVE-1999-1144
Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges...
PT-1997-1195 · Hewlett Packard · Hp-Ux
Name of the Vulnerable Software and Affected Versions: HP-UX versions 10.x Description: The issue is related to certain files in MPower that are installed with insecure permissions, allowing local users to gain privileges. Recommendations: For HP-UX version 10.x, update the permissions of the...
PT-1997-1214 · Hewlett Packard · Hp-Ux
Name of the Vulnerable Software and Affected Versions: HP-UX version 10.20 Description: The issue is related to insecure permissions in the movemail component, which can be exploited by local users to gain privileges. Recommendations: For HP-UX version 10.20, adjust the permissions of the movemai...
