4297 matches found
CVE-2006-5600
Axalto Protiva 1.1, possibly only non-commercial versions, stores passwords in plaintext in files with insecure permissions, which allows local users to gain privileges by reading the passwords from 1 KeyTool\keytool.config or 2 webapps\protiva\WEB-INF\classes\authserver.config...
CVE-2006-5600
Axalto Protiva 1.1, possibly only non-commercial versions, stores passwords in plaintext in files with insecure permissions, which allows local users to gain privileges by reading the passwords from 1 KeyTool\keytool.config or 2 webapps\protiva\WEB-INF\classes\authserver.config...
CVE-2006-5600
Axalto Protiva 1.1 (possibly non-commercial versions) stores passwords in plaintext in files with insecure permissions. Local attackers can gain privileges by reading sensitive data from (1) KeyTool\keytool.config or (2) webapps\protiva\WEB-INF\classes\authserver.config. Root cause appears to be ...
QNX RTOS 6.3.0 Insecure rc.local Permissions Plus System Crash Exploit
No description provided by source. !/bin/sh this combines http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387 and http://www.idefense.com/intelligence/vulnerabilities/display.php?id=386 into local r00t w00t t00t t00t, hugs and kisses from www.lort.dk. unset PAGER; man chmod |...
IBM Lotus Notes sets insecure default permissions on program data
Overview IBM Lotus Notes sets insecure default permissions on the Notes directory. This vulnerability may allow a local attacker to gain unintended access to Lotus Notes program data. Description IBM Lotus Notes installs numerous program files and program data in a special directory known as the...
CVE-2006-5406
Passgo Defender 5.2 creates the application directory with insecure permissions Everyone/Full Control, which allows local users to read and modify sensitive files. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-5406
Passgo Defender 5.2 creates the application directory with insecure permissions Everyone/Full Control, which allows local users to read and modify sensitive files. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2005-2454
IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions Everyone/Full Control for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder...
CVE-2006-5072
The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack...
CVE-2006-5072
The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack...
CVE-2006-5072
The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack...
CVE-2006-5072
The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack...
CVE-2006-5072
CVE-2006-5072 concerns Mono’s System.CodeDom.Compiler usage, where temporary files are created with insecure permissions, enabling a local attacker to overwrite arbitrary files or inject/execute code via a symlink attack. The vulnerability affects Mono implementations across multiple distros, wit...
CVE-2006-5163
IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux (and possibly other versions) is affected by CVE-2006-5163, which creates /tmp/installserver.txt with insecure permissions, enabling local users to perform a symlink attack to append data to arbitrary files. This is the concrete vulnerability ...
CVE-2006-5163
IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack...
CVE-2006-4439
pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions 755 or 777 if the pkgmap file contains a "?" question mark in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871...
Design/Logic Flaw
AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions Everyone/Full Control for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files...
CVE-2006-0948
CVE-2006-0948 concerns AOL 9.0 Security Edition revision 4184.2340 (and potentially other versions) where the installer/directory permissions grant Everyone Full Control on the America Online 9.0 directory, enabling local users to replace or manipulate critical files. Root cause is insecure defau...
CVE-2006-0948
AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions Everyone/Full Control for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files...