4328 matches found
USN-215-1: fetchmailconf vulnerability
Thomas Wolff and Miloslav Trmac discovered a race condition in the fetchmailconf program. The output configuration file was initially created with insecure permissions, and secure permissions were applied after writing the configuration into the file. During this time, the file was world readable...
CVE-2005-3088
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords...
CVE-2005-3088
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords...
CVE-2005-3088
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords...
security flaw
mysqlinstalldb in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysqlinstalldb.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents...
DSA-843-1 arc - insecure temporary file
Bulletin has no description...
Debian DSA-804-1 : kdelibs - insecure permissions
KDE developers have reported a vulnerability in the backup file handling of Kate and Kwrite. The backup files are created with default permissions, even if the original file had more strict permissions set. This could disclose information unintendedly. %NASLMINLEVEL 70300 C Tenable Network...
Debian DSA-787-1 : backup-manager - insecure permissions and tempfile
Two bugs have been found in backup-manager, a command-line driven backup utility. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1855 Jeroen Vermeulen discovered that backup files are created with default permissions making them world readable, eve...
[SECURITY] [DSA 787-1] New backup-manager package fixes several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 787-1 [email protected] http://www.debian.org/security/ Martin Schulze August 26th, 2005 http://www.debian.org/security/faq -...
DSA-787-1 backup-manager - insecure permissions and tempfile
Bulletin has no description...
CVE-2005-2597
AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program...
CVE-2005-2597
CVE-2005-2597 concerns AOL Client Software 9.0, where insecure permissions on the installation path allow a local user to replace ACSD.exe with a malicious program, enabling arbitrary code execution with SYSTEM privileges. The vulnerability is local in scope and hinges on insufficient protection ...
kavLocalRoot.txt
FYI, a new version is already available and a proposed workaround is described at the end of the advisory. Peter URLs for this document: ftp://ftp.aerasec.de/pub/advisories/kav4unix/kav4unix-local-root-exploit.txt TXT P & C 2005 AERAsec Network Services and Security GmbH The information in this...
CVE-2005-2554
The CVE-2005-2554 issue affects Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3). The web server stores in insecure permissions for the Common Framework\Db folder, allowing local users to read arbitrary files by creating a subfolder in the EPO agent web root. This is an information‑l...
CVE-2005-2554
The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 patch 3 uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory...
CVE-2005-2554
The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 patch 3 uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory...
Insecure directory permissions of default installation of Kaspersky Anti-Virus for Unix/Linux File Servers will lead to local root exploit
FYI, a new version is already available and a proposed workaround is described at the end of the advisory. Peter URLs for this document: ftp://ftp.aerasec.de/pub/advisories/kav4unix/kav4unix-local-root-exploit.txt TXT P & C 2005 AERAsec Network Services and Security GmbH The information in this...
FreeBSD : mozilla -- insecure permissions for some downloaded files (a77849a5-696f-11d9-ae49-000c41e2cdad)
In a Mozilla bug report, Daniel Kleinsinger writes : I was comparing treatment of attachments opened directly from emails on different platforms. I discovered that Linux builds save attachments in /tmp with world readable rights. This doesn't seem like a good thing. Couldn't someone else logged...
FreeBSD : newsgrab -- insecure file and directory creation (cd7e260a-6bff-11d9-a5df-00065be4b5b6)
The newsgrab script uses insecure permissions during the creation of the local output directory and downloaded files. After a file is created, permissions on it are set using the mode value of the newsgroup posting. This can potentially be a problem when the mode is not restrictive enough. In...