CVE-2002-0103

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by 1 running webcached or 2 obtaining the administrator password from webcache.xml...

Local privalege escalation issues with Webmin 0.92

18-02-02 -- [email protected] About Webmin: ------------- "Webmin is a web-based interface for system administration for Unix. Using any browser that supports tables and forms and Java for the File Manager module, you can setup user accounts, Apache, DNS, file sharing and so on." Problem 1...

CVE-2002-0103

CVE-2002-0103 affects Oracle9iAS Web Cache 2.0.0.x. An installer creates executable and configuration files with insecure permissions, enabling local privilege escalation. Impacted scenarios include (1) executing webcached to gain privileges and (2) reading webcache.xml to obtain the administrato...

CVE-2002-0103: Undefined Security Weakness

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by 1 running webcached or 2 obtaining the administrator password from webcache.xml...

CVE-2001-0635

Red Hat Linux 7.1 is affected by CVE-2001-0635 due to insecure permissions on swap files created at install. The swap files could be world-readable, enabling a local attacker to read sensitive data such as passwords and potentially escalate privileges. The connected Red Hat advisory RHSA-2001:058...

CVE-1999-1246

The CVE-1999-1246 entry relates to Microsoft Site Server 3.0: the Direct Mailer feature stores user domain names and passwords in plaintext in the TMLBQueue share, which has insecure default permissions. This enables remote read of passwords and privilege escalation as described. The documents do...

CVE-2000-0298

The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...

CVE-2001-0416

CVE-2001-0416 affects sgml-tools (sgmltools) prior to version 1.0.9-15. The root cause is insecure handling of temporary files: sgml-tools creates temporary files directly (or in insecure permissions) which can allow other local users to read files being processed. Impact is partial confidentiali...

CVE-1999-1246

Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges...

CVE-2001-0416

sgml-tools aka sgmltools before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed by sgml-tools...

CVE-1999-1249

CVE-1999-1249 affects HP-UX 10.20 movemail. The issue is insecure permissions in the movemail component, which can be exploited by local users to gain privileges. Mitigation is to adjust/correct the movemail permissions to prevent unauthorized privilege escalation.

CVE-1999-1144

The CVE-1999-1144 entry affects HP-UX MPower on HP-UX 10.x, where certain MPower files are installed with insecure permissions, enabling local privilege escalation due to insufficient access controls. Root cause: insecure file permissions. Connected PT-1997-1195 notes the remediation to update/se...

CVE-2001-0806

Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...

CVE-1999-1019

SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, enabling local users to replace a privileged executable (processd) with a Trojan horse and potentially achieve a root/Administrator compromise. The affected component is the SpectroSERV...

CVE-1999-1325

Summary (CVE-1999-1325): SAS System 5.18 running on VAX/VMS is installed with insecure permissions on its directories and startup file, enabling local users to gain privileges. The entry is rated CVSS v2 base score 7.2 (HIGH) with local attack vector and no authentication required; impact is conf...

CVE-1999-1249

movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges...

CVE-1999-1325

SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges...

CVE-2001-0806

CVE-2001-0806 describes a local vulnerability in Apple MacOS X 10.0 and 10.1 where the Desktop folder can be read and written by a local user due to insecure default permissions when the Desktop is created in certain languages. The issue affects the Desktop path permissions rather than remote acc...

CVE-2001-0497

CVE-2001-0497 concerns BIND: dnskeygen (<=8.2.4) and dnssec-keygen (

CVE-2000-0298

CVE-2000-0298 concerns Windows 2000 unattended installations using the OEMPreinstall option. The provided sources state that this setup creates insecure permissions on the All Users and Default Users directories, enabling potential local compromise with complete confidentiality, integrity, and av...