CVE-2000-0298: Undefined Security Weakness

The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...

CVE-1999-1144: Undefined Security Weakness

Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges...

CVE-1999-1249: Undefined Security Weakness

movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges...

CVE-1999-1325: Undefined Security Weakness

SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges...

CVE-2001-0806: Undefined Security Weakness

Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...

CVE-1999-1019: Undefined Security Weakness

SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable processd with a Trojan horse, facilitating a root or Administrator compromise...

CVE-2001-0416: Undefined Security Weakness

sgml-tools aka sgmltools before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed by sgml-tools...

CVE-1999-1507: Undefined Security Weakness

Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash...

Sawmill 6.2.x - Admin Password Insecure Default Permissions

source: https://www.securityfocus.com/bid/4077/info Sawmill is commercial log analysis software. It runs on most Unix and Linux variants, Microsoft Windows NT/2000 operating systems and MacOS. Sawmill creates the file AdminPassword with insecure default permissions on Solaris platforms...

CVE-1999-1091

UNIX news readers tin and rtin create the /tmp/.tinlog file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack...

MAGIC Enterprise Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 immutec Security Advisory ID: SA-MAGIC-001 Date: 2001/12/17 Version: 0.2 Magic Enterprise multiple vulnerabilities Affected Software/System: ========================= Vendor : Magic Software http://www.magicsoftware.com Product : Magic Enterprise...

CVE-2001-0806

Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...

CVE-2001-0378

readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files...

CVE-2001-0378: Undefined Security Weakness

readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files...

CVE-1999-1084

The CVE-1999-1084 entry describes insecure permissions on the AEDebug registry key, enabling local users to modify it to specify a Trojan Horse debugger that is automatically executed on a system crash. Affected component: AEDebug registry key. Root cause: insecure registry permissions. Impact: m...

CVE-1999-1092

CVE-1999-1092 affects tin 1.40: it creates the .tin directory with insecure permissions, allowing local users to read passwords from the .inputhistory file. The impact is partial confidentiality breach via local access. No remediation details are provided in the supplied documents.

CVE-1999-1275

The CVE-1999-1275 entry describes a local privilege escalation in Lotus cc:Mail release 8. The issue arises because the postoffice password is stored in plaintext in a hidden file with insecure permissions, allowing local users to access the password and gain privileges. The vulnerability affects...

CVE-1999-1345

CVE-1999-1345 affects the Auto_FTP 0.2 setup where the Auto_FTP.pl script uses the /tmp/ftp_tmp directory as a shared area with insecure permissions. This misconfiguration allows local users to: (1) place arbitrary files into the shared directory to be sent to the remote server, and (2) view file...

CVE-1999-1403

The CVE-1999-1403 entry concerns IBM/Tivoli OPC Tracker Agent version 2 release 1, which creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writable). This configuration could allow local users to disrupt operations and potentially gain privileg...

CVE-1999-1084

The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash...