CVE-2006-4493

The affected component is xbiff2 1.9. It creates $HOME/.xbiff2rc in the user’s home directory with insecure permissions, enabling local users to access sensitive information such as login credentials. This summary relies on the CVE description and notes the provenance is unknown (third‑party info...

[SA21686] xbiff2 Insecure File Permissions

TITLE: xbiff2 Insecure File Permissions SECUNIA ADVISORY ID: SA21686 VERIFY ADVISORY: http://secunia.com/advisories/21686/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: xbiff2 1.x http://secunia.com/product/11769/ DESCRIPTION: Thomas Wolff has...

CVE-2006-4439

pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions 755 or 777 if the pkgmap file contains a "?" question mark in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871...

[SA21633] Sun Solaris pkgadd Insecure File Permissions

TITLE: Sun Solaris pkgadd Insecure File Permissions SECUNIA ADVISORY ID: SA21633 VERIFY ADVISORY: http://secunia.com/advisories/21633/ CRITICAL: Less critical IMPACT: Manipulation of data, Privilege escalation WHERE: Local system OPERATING SYSTEM: Sun Solaris 10 http://secunia.com/product/4813/...

solpot-adv-01.txt

SolpotCrew Community PHP Event Calendar versi 1.4 pathtocalendar Remote File Inclusion Vendor site : http://www.softcomplex.com/products/phpeventcalendar/ Bug Found By :Solpot a.k.a k. Hasibuan 13th july 2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-01.t...

CVE-2006-3452

Adobe Reader and Acrobat on Mac OS X (versions 6.0.4 and earlier) are affected by insecure file and directory permissions that allow local users to gain privileges by overwriting the executable. The CVSS v2 base score is 4.6 (MEDIUM) with local access and low attack complexity. No explicit remedi...

CentOS 4 : lm_sensors (CESA-2005:825)

Updated lmsensors packages that fix an insecure file issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The lmsensors package includes a collection of modules for general SMBus access and hardware monitoring. This package...

[SECURITY] [DSA 1062-1] New kphone packages fix information disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 1062-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 19th, 2006 http://www.debian.org/security/faq -...

[SA20102] DUbanner Insecure File Upload Vulnerability

TITLE: DUbanner Insecure File Upload Vulnerability SECUNIA ADVISORY ID: SA20102 VERIFY ADVISORY: http://secunia.com/advisories/20102/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: DUware DUbanner 3.x http://secunia.com/product/2848/ DESCRIPTION: Dj ReMix has...

FreeBSD : libgadu -- multiple vulnerabilities (3b4a6982-0b24-11da-bc08-0001020eed82)

Wojtek Kaniewski reports : Multiple vulnerabilities have been found in libgadu, a library for handling Gadu-Gadu instant messaging protocol. It is a part of ekg, a Gadu-Gadu client, but is widely used in other clients. Also some of the user contributed scripts were found to behave in an insecure...

FreeBSD : ghostscript -- insecure temporary file creation vulnerability (27a70a01-5f6c-11da-8d54-000cf18bbe54)

Ghostscript is affected by an insecure temporary file creation vulnerability. This issue is likely due to a design error that causes the application to fail to verify the existence of a file before writing to it. An attacker may leverage this issue to overwrite arbitrary files with the privileges...

[SECURITY] [DSA 1035-1] New fcheck packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1035-1 [email protected] http://www.debian.org/security/ Steve Kemp April 15th, 2005 http://www.debian.org/security/faq -...

[SA19632] Sun Java Studio Enterprise Insecure File Permissions

TITLE: Sun Java Studio Enterprise Insecure File Permissions SECUNIA ADVISORY ID: SA19632 VERIFY ADVISORY: http://secunia.com/advisories/19632/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Sun Java Studio Enterprise 8.x http://secunia.com/product/9354/...

[SA19559] fbida fbgs Insecure Temporary File Creation Vulnerability

TITLE: fbida fbgs Insecure Temporary File Creation Vulnerability SECUNIA ADVISORY ID: SA19559 VERIFY ADVISORY: http://secunia.com/advisories/19559/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: fbida 2.x http://secunia.com/product/9244/ DESCRIPTION: Jan Braun...

[SECURITY] [DSA 1013-1] New snmptrapfmt packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 1013-1 [email protected] http://www.debian.org/security/ Martin Schulze March 22nd, 2006 http://www.debian.org/security/faq -...

[SA19284] avast! Antivirus Insecure Default File Permissions

TITLE: avast! Antivirus Insecure Default File Permissions SECUNIA ADVISORY ID: SA19284 VERIFY ADVISORY: http://secunia.com/advisories/19284/ CRITICAL: Less critical IMPACT: Security Bypass, Manipulation of data, Privilege escalation WHERE: Local system SOFTWARE: avast! Antivirus 4.x...

[TZO-062006] Safe'nVulnerable

Safe'nSec - Insecure File execution and Auto-startup Ref : TZO-062006-SafenSec Author : Thierry Zoller WWW : http://secdev.zoller.lu Article : http://secdev.zoller.lu/research/safensec.htm I. Background "Safe'n'Sec is complex data and user applications protection against threats and vulnerabiliti...

CVE-2006-0512

PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh, 4 migrateallnetinfooffline.s...

[SECURITY] [DSA 927-2] New tkdiff packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 927-2 [email protected] http://www.debian.org/security/ Martin Schulze December 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 927-1] New tkdiff packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 927-1 [email protected] http://www.debian.org/security/ Martin Schulze December 27th, 2005 http://www.debian.org/security/faq -...