CVE-2007-5847

Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information...

CVE-2007-5847

CVE-2007-5847 is a race condition in the CFURLWriteDataAndPropertiesToResource API within Core Foundation on Mac OS X 10.4.11. The flaw causes created files to inherit insecure permissions, potentially allowing local users to access sensitive information. The vulnerability affects Mac OS X 10.4.1...

CVE-2007-5847

Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information...

Code injection

Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions Everyone/Full Control, which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs...

CVE-2007-6033

Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions Everyone/Full Control, which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs...

CVE-2007-6033

Invensys Wonderware InTouch 8.0 is affected by an insecure NetDDE share that grants Everyone/Full Control, enabling remote authenticated (and possibly anonymous) attackers to execute arbitrary programs. The root cause is the NetDDE share permissions misconfiguration, allowing remote code executio...

CVE-2002-2407

Certain patches for QNX Neutrino realtime operating system RTOS 6.2.0 set insecure permissions for the files 1 /sbin/io-audio by OS Update Patch A, 2 /bin/shutdown, 3 /sbin/fs-pkg, and 4 phshutdown by QNX experimental patches, 5 cpim, 6 vpim, 7 phrelaycfg, and 8 columns, 9 othello, 10 peg, 11...

Authentication flaw

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging...

CVE-2007-5686

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging...

DEBIAN-CVE-2007-5686

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging...

CVE-2007-5686

CVE-2007-5686 affects initscripts on rPath Linux 1. It sets insecure permissions on /var/log/btmp, allowing local users to read sensitive information about authentication attempts. The advisory notes that sshd logging of failed remote authentication attempts may also be affected because SSHD dete...

CVE-2007-5686

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging...

CVE-2007-5686

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging...

CVE-2003-1428

CVE-2003-1428 affects Gallery 1.3.3, where directories are created with insecure permissions, allowing local users to read, modify, or delete photos. The provided documents state the insecure permissions as the root cause; no exploit details or fixed version are documented here. References are li...

CVE-2002-2263

CVE-2002-2263 concerns the HP-UX Visualize Conference B.11.00.11 installer on HP-UX 11.00/11.11, which creates /etc/dt and its subdirectories with insecure permissions. This permits local users to read or write arbitrary files due to improper permission handling during installation. The provided ...

CVE-2002-2263

The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties with insecure permissions, which allows local users to read or write arbitrary files...

USN-516-1: xfsdump vulnerability

Paul Martin discovered that xfsfsr creates a temporary directory with insecure permissions. This allows a local attacker to exploit a race condition in xfsfsr to read or overwrite arbitrary files on xfs filesystems...

CVE-2007-4536

TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying 1 disclaimer.txt, 2 sponsors.txt, and 3 banners.txt, which are used in an include call. NOTE: there might be local attack vectors that extend...

CVE-2007-4536

TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying 1 disclaimer.txt, 2 sponsors.txt, and 3 banners.txt, which are used in an include call. NOTE: there might be local attack vectors that extend...

CVE-2007-3532

NVIDIA drivers nvidia-drivers before 1.0.7185, 1.0.9639, and 100.14.11, as used in Gentoo Linux and possibly other distributions, creates /dev/nvidia device files with insecure permissions, which allows local users to modify video card settings, cause a denial of service crash or physical video...