nortel-sh.txt

!/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged local user to obtain root privileges. This particular bug is as...

CVE-2007-1057

The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause anoth...

CVE-2007-1057

The CVE-2007-1057 issue affects the Net Direct client for Linux before 6.0.5 in Nortel products (Application Switch 2424, VPN 3050/3070, SSL VPN Module 1000). The vulnerability arises from extracting and executing files with insecure permissions, enabling a local attacker to exploit a race condit...

Trend Micro Multiple Products TmComm.sys IOCTL Handler Local Privilege Escalation

The version of tmcomm.sys installed on the remote system is affected by a local privilege escalation vulnerability. The issue exists due to insecure permissions on Tmcomm.sys which allows write access to 'everyone' group on the remote system. Successful exploitation of this issue could lead to...

Design/Logic Flaw

The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges...

CVE-2007-0536

The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges...

CVE-2007-0536

The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges...

CVE-2007-0536

The CVE-2007-0536 issue affects rPath Linux 1: the rMake chroot helper fails to drop supplemental groups, causing packages to be installed with insecure permissions and potentially enabling local privilege escalation. Root cause: missing drop of supplemental groups in the chroot helper. Impact: l...

Design/Logic Flaw

Unsanity Application Enhancer APE 2.0.2 installs with insecure permissions for the 1 ApplicationEnhancer binary and the 2 /Library/Frameworks/ApplicationEnhancer.framework directory, which allows local users to gain privileges by modifying or replacing the binary or library files...

CVE-2007-0161

The PML Driver HPZ12 HPZipm12.exe in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICECHANGECONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to...

Design/Logic Flaw

The PML Driver HPZ12 HPZipm12.exe in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICECHANGECONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to...

CVE-2007-0162

Unsanity Application Enhancer APE 2.0.2 installs with insecure permissions for the 1 ApplicationEnhancer binary and the 2 /Library/Frameworks/ApplicationEnhancer.framework directory, which allows local users to gain privileges by modifying or replacing the binary or library files...

CVE-2007-0162

Unsanity Application Enhancer APE 2.0.2 installs with insecure permissions for the 1 ApplicationEnhancer binary and the 2 /Library/Frameworks/ApplicationEnhancer.framework directory, which allows local users to gain privileges by modifying or replacing the binary or library files...

CVE-2007-0161

The PML Driver HPZ12 HPZipm12.exe in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICECHANGECONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to...

CVE-2007-0162: Undefined Security Weakness

Unsanity Application Enhancer APE 2.0.2 installs with insecure permissions for the 1 ApplicationEnhancer binary and the 2 /Library/Frameworks/ApplicationEnhancer.framework directory, which allows local users to gain privileges by modifying or replacing the binary or library files...

CVE-2007-0162

CVE-2007-0162: Affected product is Unsanity Application Enhancer (APE) 2.0.2. The root cause is insecure permissions on the ApplicationEnhancer binary and on /Library/Frameworks/ApplicationEnhancer.framework, enabling local privilege escalation by modifying or replacing these files. No remediatio...

CVE-2006-6382

The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's directory with insecure permissions, which allows local users to append log data to arbitrary files via a symlink attack. NOTE: The provenance of this information is unknown; the details are obtained...

CVE-2006-6382

The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's directory with insecure permissions, which allows local users to append log data to arbitrary files via a symlink attack. NOTE: The provenance of this information is unknown; the details are obtained...

GLSA-200611-23 : Mono: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200611-23 Mono: Insecure temporary file creation Sebastian Krahmer of the SuSE Security Team discovered that the System.CodeDom.Compiler classes of Mono create temporary files with insecure permissions. Impact : A local attacker...

CVE-2006-6145

CRYPTOCard CRYPTO-Server before 6.4.56 stores LDAP credentials in plaintext in UninstallerData\installvariables.properties, which has insecure permissions and allows local users to obtain the credentials. NOTE: The provenance of this information is unknown; the details are obtained solely from...