CVE-1999-1325: Undefined Security Weakness

SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges...

CVE-1999-1507: Undefined Security Weakness

Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash...

CVE-2001-0806: Undefined Security Weakness

Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...

CVE-1999-1019: Undefined Security Weakness

SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable processd with a Trojan horse, facilitating a root or Administrator compromise...

CVE-1999-1144: Undefined Security Weakness

Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges...

CVE-1999-1249: Undefined Security Weakness

movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges...

CVE-2001-0416: Undefined Security Weakness

sgml-tools aka sgmltools before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed by sgml-tools...

CVE-2001-0497: Incorrect Default Permissions

dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures TSIG, which allows attackers to obtain the keys and perform dynamic DNS updates...

CVE-2000-0298: Undefined Security Weakness

The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...

Sawmill 6.2.x - Admin Password Insecure Default Permissions

source: https://www.securityfocus.com/bid/4077/info Sawmill is commercial log analysis software. It runs on most Unix and Linux variants, Microsoft Windows NT/2000 operating systems and MacOS. Sawmill creates the file AdminPassword with insecure default permissions on Solaris platforms...

CVE-1999-1091

UNIX news readers tin and rtin create the /tmp/.tinlog file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack...

MAGIC Enterprise Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 immutec Security Advisory ID: SA-MAGIC-001 Date: 2001/12/17 Version: 0.2 Magic Enterprise multiple vulnerabilities Affected Software/System: ========================= Vendor : Magic Software http://www.magicsoftware.com Product : Magic Enterprise...

CVE-2001-0806

Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...

CVE-2001-0378

readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files...

CVE-2001-0378: Undefined Security Weakness

readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files...

CVE-1999-1126

Cisco Resource Manager CRM 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from 1 swimswd.log, 2 swimdebug.log, 3 dbidebug.log, and 4 temporary files...

CVE-1999-1091

UNIX news readers tin and rtin create the /tmp/.tinlog file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack...

CVE-1999-1345

AutoFTP.pl script in AutoFTP 0.2 uses the /tmp/ftptmp as a shared directory with insecure permissions, which allows local users to 1 send arbitrary files to the remote server by placing them in the directory, and 2 view files that are being transferred...

CVE-1999-1092

tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file...

CVE-1999-1403

The CVE-1999-1403 entry concerns IBM/Tivoli OPC Tracker Agent version 2 release 1, which creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writable). This configuration could allow local users to disrupt operations and potentially gain privileg...