4740 matches found
CVE-2000-0083: Undefined Security Weakness
HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges...
CVE-2000-0100: Undefined Security Weakness
The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program...
CVE-2000-0298
The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...
CVE-1999-1126
Cisco Resource Manager CRM 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from 1 swimswd.log, 2 swimdebug.log, 3 dbidebug.log, and 4 temporary files...
CVE-1999-1084
The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash...
CVE-1999-1325
SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges...
CVE-2000-0100
The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program...
CVE-1999-1092
tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file...
CVE-1999-1345
AutoFTP.pl script in AutoFTP 0.2 uses the /tmp/ftptmp as a shared directory with insecure permissions, which allows local users to 1 send arbitrary files to the remote server by placing them in the directory, and 2 view files that are being transferred...
wordperfect8.txt
Date: Fri, 18 Dec 1998 11:47:45 -0500 From: Edsel Adap Reply-To: Bugtraq List To: [email protected] Subject: wordperfect 8 for linux security Hi, I sent a similar message to Corel about this. And I figured I'd send it out here in order to prevent people from opening up their systems by...
CVE-1999-1019
SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable processd with a Trojan horse, facilitating a root or Administrator compromise...
PT-1999-1179 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns inappropriate permissions for system-critical data in an anonymous FTP account. This includes the root directory being writeable by anyone, the ability to obtain ...
CVE-1999-1403
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions world-readable and world-writable, which could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files...
Slackware Linux 3.4 - 'liloconfig-color' Temporary File
source: https://www.securityfocus.com/bid/77/info liloconfig-color creates the file /tmp/reply insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/reply to any file and wait for root to run the program. This will clober the target file. The file created has...
CVE-1999-1275
Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges...
CVE-1999-1144
Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges...
PT-1997-1195 · Hewlett Packard · Hp-Ux
Name of the Vulnerable Software and Affected Versions: HP-UX versions 10.x Description: The issue is related to certain files in MPower that are installed with insecure permissions, allowing local users to gain privileges. Recommendations: For HP-UX version 10.x, update the permissions of the...
PT-1997-1214 · Hewlett Packard · Hp-Ux
Name of the Vulnerable Software and Affected Versions: HP-UX version 10.20 Description: The issue is related to insecure permissions in the movemail component, which can be exploited by local users to gain privileges. Recommendations: For HP-UX version 10.20, adjust the permissions of the movemai...
