CVE-2006-3452: Undefined Security Weakness

Adobe Reader and Acrobat 6.0.4 and earlier, on Mac OSX, has insecure file and directory permissions, which allows local users to gain privileges by overwriting program files...

CVE-2006-0561

Cisco Secure Access Control Server ACS 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functions to obtain the...

CVE-2006-0561

Cisco Secure ACS for Windows 3.x stores ACS administrator passwords and the master key in the Windows registry with insecure permissions. The master key and encrypted passwords can be decrypted locally (and over the network if remote registry access is enabled) using Microsoft Crypto API function...

CVE-2006-2045

The 1 shadow password file in na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has world readable permissions, which allows local users to view encrypted passwords; and the 2 NetAccess database file has world readable and writable permissions, which allows local users to view sensitive...

[SA19465] NetBSD mail Insecure Record File Creation

TITLE: NetBSD mail Insecure Record File Creation SECUNIA ADVISORY ID: SA19465 VERIFY ADVISORY: http://secunia.com/advisories/19465/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system OPERATING SYSTEM: NetBSD 1.x http://secunia.com/product/255/ DESCRIPTION: A...

Design/Logic Flaw

Untrusted search path vulnerability in the TrueVector service VSMON.exe in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm's own folders before other folders that are specified in a user's PATH, which might allow local users to execute code as SYSTEM by placing malicious DLLs into...

Design/Logic Flaw

SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program...

CVE-2006-1197

SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program...

CVE-2006-1197

CVE-2006-1197 : The entry describes that SafeDisc installs a driver service for the insecurely-permissioned secdrv.sys, enabling local users to gain privileges by altering the service configuration to reference a malicious program. This establishes a local-privilige-elevation scenario as stated; ...

CVE-2006-1197

SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program...

CVE-2006-1197: Undefined Security Weakness

SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program...

[SA19171] Symantec Ghost Multiple Vulnerabilities

TITLE: Symantec Ghost Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19171 VERIFY ADVISORY: http://secunia.com/advisories/19171/ CRITICAL: Less critical IMPACT: Manipulation of data, Exposure of sensitive information, Privilege escalation WHERE: Local system SOFTWARE: Symantec Ghost 8.x...

CVE-2006-1050

Kwik-Pay Payroll 4.2.20, and possibly other versions, stores the KwikPay.mdb database file with insecure permissions, which allows local users to obtain sensitive information such as employment and payment data. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2006-1050

Kwik-Pay Payroll 4.2.20, and possibly other versions, stores the KwikPay.mdb database file with insecure permissions, which allows local users to obtain sensitive information such as employment and payment data. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2006-1050

Kwik-Pay Payroll 4.2.20 is reported to store the KwikPay.mdb database file with insecure permissions, potentially allowing local users to access employment and payment data. The vendor disputes this vulnerability, stating the mdb file is a template and does not contain sensitive information; also...

CVE-2006-1050: Undefined Security Weakness

Kwik-Pay Payroll 4.2.20, and possibly other versions, stores the KwikPay.mdb database file with insecure permissions, which allows local users to obtain sensitive information such as employment and payment data. NOTE: the provenance of this information is unknown; the details are obtained solely...

PT-2006-2087 · Kwik Pay · Kwik-Pay Payroll

Name of the Vulnerable Software and Affected Versions: Kwik-Pay Payroll version 4.2.20 Description: The issue concerns the storage of the KwikPay.mdb database file with insecure permissions, potentially allowing local users to access sensitive information such as employment and payment data. The...

CVE-2006-1011

LetterMerger 1.2 stores user information in Access database files with insecure permissions, which allows local users to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Information disclosure

LetterMerger 1.2 stores user information in Access database files with insecure permissions, which allows local users to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1011

LetterMerger 1.2 stores user information in Access database files with insecure permissions, allowing local users to obtain sensitive data. Root cause: improper access control on the database files. Impact: potential information disclosure for local attackers. Public references note this is a low...