SUSE CVE-2017-9606

Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction with a lack of integrity and authenticity checks...

PT-2008-4730 · Partygaming · Partypoker

Name of the Vulnerable Software and Affected Versions: PartyGaming PartyPoker client program version 121/120 Description: The issue concerns the PartyGaming PartyPoker client program, which fails to properly verify the authenticity of updates. This allows remote man-in-the-middle attackers to...