4297 matches found
CVE-2001-0806
Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...
CVE-2001-0378
readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files...
CVE-1999-1092
tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file...
CVE-1999-1126
Cisco Resource Manager CRM 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from 1 swimswd.log, 2 swimdebug.log, 3 dbidebug.log, and 4 temporary files...
CVE-1999-1275
Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges...
CVE-1999-1345
AutoFTP.pl script in AutoFTP 0.2 uses the /tmp/ftptmp as a shared directory with insecure permissions, which allows local users to 1 send arbitrary files to the remote server by placing them in the directory, and 2 view files that are being transferred...
CVE-1999-1091
UNIX news readers tin and rtin create the /tmp/.tinlog file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack...
CVE-1999-1403
The CVE-1999-1403 entry concerns IBM/Tivoli OPC Tracker Agent version 2 release 1, which creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writable). This configuration could allow local users to disrupt operations and potentially gain privileg...
CVE-1999-1092
CVE-1999-1092 affects tin 1.40: it creates the .tin directory with insecure permissions, allowing local users to read passwords from the .inputhistory file. The impact is partial confidentiality breach via local access. No remediation details are provided in the supplied documents.
CVE-1999-1084
The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash...
CVE-1999-1403
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions world-readable and world-writable, which could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files...
CVE-1999-1345
CVE-1999-1345 affects the Auto_FTP 0.2 setup where the Auto_FTP.pl script uses the /tmp/ftp_tmp directory as a shared area with insecure permissions. This misconfiguration allows local users to: (1) place arbitrary files into the shared directory to be sent to the remote server, and (2) view file...
CVE-1999-1401
CVE-1999-1401 affects the Desktop searchbook program on IRIX 5.0.x through 6.2. The vulnerability involves insecure permissions on certain user files (iconbook and searchbook), as described in the initial entry. No technical details, exploit information, or remediation are provided in the connect...
CVE-1999-1084
The CVE-1999-1084 entry describes insecure permissions on the AEDebug registry key, enabling local users to modify it to specify a Trojan Horse debugger that is automatically executed on a system crash. Affected component: AEDebug registry key. Root cause: insecure registry permissions. Impact: m...
CVE-1999-1401
Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files iconbook and searchbook...
CVE-1999-1091
Vulnerability: UNIX news readers tin and rtin create the file "/tmp/.tin_log" with insecure permissions and follow symlinks. Root cause: insecure file permissions combined with symlink handling allows a local attacker to modify permissions of files writable by the user via a symlink attack. Affec...
CVE-1999-1275
The CVE-1999-1275 entry describes a local privilege escalation in Lotus cc:Mail release 8. The issue arises because the postoffice password is stored in plaintext in a hidden file with insecure permissions, allowing local users to access the password and gain privileges. The vulnerability affects...
Hewlett Packard HP-UX pcltotiff is installed with insecure permissions
Overview The utility pcltotiff is installed with insecure permissions on some Hewlett Packard systems. Description The HP utility pcltotiff is installed with sgid bin permissions in order to read files in /usr/lib/X11/fonts/ifo.st/typefaces/. This gives more permissions to pcltotiff than are...
CVE-2001-0635
Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional privileges by reading sensitive information from the swap file, such as passwords...