CVE-2016-8605

Removed by vendor...

CVE-2016-8605

The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode argument would create directories as 0777. Th...

Teradata Virtual Machine Community Edition Elevation of Privilege Vulnerability

Teradata Virtual Machine Community Edition is a Teradata virtual container packaged with the SUSE Linux Enterprise Server SLES operating system and Teradata databases to run in a virtualized environment on third-party hardware. A security vulnerability exists in Teradata Virtual Machine Community...

FreeBSD : lives -- insecure files permissions (a8e9d834-a916-11e6-b9b4-bcaec524bf84)

Debian reports : smogrify script creates insecure temporary files. lives creates and uses world-writable directory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018...

CVE-2016-7488

Teradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex/pkgmgr. These could allow a local user to modify its contents and execute commands as root...

CVE-2016-7488

Teradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex/pkgmgr. These could allow a local user to modify its contents and execute commands as root...

Magento Community Edition < 1.9.2.0 Multiple Vulnerabilities

Binary data 9676.prm...

guile2 -- multiple vulnerabilities

Ludovic Courtès reports: The REPL server is vulnerable to the HTTP inter-protocol attack The ‘mkdir’ procedure of GNU Guile, an implementation of the Scheme programming language, temporarily changed the process’ umask to zero. During that time window, in a multithreaded application, other threads...

Apache Tomcat 8 / 7 / 6 Privilege Escalation

============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-5425 - Release date: 10.10.2016 - Revision: 1 - Severity: High ============================================= I. VULNERABILITY -------------------------...

Apache Tomcat 876 (RedHat Based Distros) - Local Privilege Escalation

Apache Tomcat 876 RedHat Based Distros - Local Privilege Escalation ============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-5425 - Release date: 10.10.2016 - Revision: 1 - Severity: High...

Nagios Network Analyzer < 2.2.2 Multiple Vulnerabilities

Binary data 9602.prm...

ZKTeco ZKTime.Net Insecure File Elevation of Privilege Vulnerability

ZKTime.Net V3.0 is a new generation of attendance management software. ZKTeco ZKTime.Net 3.0.1.6 suffers from an insecure file elevation of privilege vulnerability. The vulnerability exists due to incorrect permissions, flagged changed with 'C' for the group 'Everyone', making the entire director...

IBM WebSphere Portal Security Bypass Vulnerability

IBM WebSphere Portal is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Dolby Audio X2 (DAX2) privilege escalation

A vulnerability has been identified with the file permissions for the Dolby DAX2 application programming interface API that could allow a local user to run files with system level privileges. Mitigation Strategy for Customers what you should do to protect yourself: Lenovo is currently working wit...

Dolby Audio X2 (DAX2) privilege escalation - Lenovo Support US

No description provided...

SUSE-SU-2016:1896-1 Security update for salt

salt was updated to fix one security issue. This security issue was fixed: - CVE-2015-8034: Prevent saving state.sls cache data to disk with insecure permissions bsc957914...

KDE Frameworks Elevation of Privilege Vulnerability

KDE Frameworks is a collection of technical libraries and software frameworks for KDE applications developed by the KDE community. kinit is one of the command line tools used to fetch and cache Kerberos tickets. A privilege-granting and access-control vulnerability exists in kinit in KDE Framewor...

Hide.Me VPN Client 1.2.4 Privilege Escalation

Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on: Windows 7 x86, fully patched Release mode: no bugbounty...

Alertus Desktop Notification for OS X sets insecure permissions for configuration and other files

Overview Alertus Desktop Notification for OS X, version 2.9.30.1700 and earlier, sets insecure permissions for configuration and other files, which may enable an unprivileged attacker to disable notifications and modify content locally. Description CWE-276: Incorrect Default Permissions -...

Cisco APIC < 1.3(2f) Binary File Installation Handling Local Privilege Escalation

According to its self-reported version number, the Cisco Application Policy Infrastructure Controller APIC software running on the remote host is prior to 1.32f. It is, therefore, affected by a local privilege escalation vulnerability due to insecure permissions set for binary files during the...