PT-2012-3662

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows local users to obtain sensitive information by reading temporary files created during printing, due to the use of world-readable permissions for these files. Recommendations For Opera...

CVE-2012-1930: Undefined Security Weakness

Opera before 11.62 on UNIX uses world-readable permissions for temporary files during printing, which allows local users to obtain sensitive information by reading these files...

CVE-2012-1797

IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors...

Design/Logic Flaw

IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors...

CVE-2012-1797

IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors...

CVE-2012-1797

IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors...

CVE-2012-1797

CVE-2012-1797 affects IBM DB2 9.5 where the file nodes.reg is created with world-writable permissions. The OpenVAS entry notes a permission weakness in IBM DB2 that is addressed by a vendor fix (Fix Pack 9). No explicit exploitation details or impact are provided beyond the permission issue; CVSS...

CLI: world-writable root directory

Red Hat JBoss Operations Network JON before 3.0.1 uses 0777 permissions for the root directory when installing a remote client, which allows local users to read or modify subdirectories and files within the root directory, as demonstrated by obtaining JON credentials...

PT-2012-3545

Name of the Vulnerable Software and Affected Versions IBM DB2 version 9.5 Description The issue is related to world-writable permissions for nodes.reg, which has unspecified impact and attack vectors. Recommendations For IBM DB2 version 9.5, change the permissions of nodes.reg to prevent...

CVE-2012-1797: Undefined Security Weakness

IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors...

Roman Andreev wins Facebook Hacker Cup 2012

Roman Andreev wins Facebook Hacker Cup 2012 25 of the world's best hackers gathered for Facebook's 2nd annual Hacker Cup event being held at its offices in Menlo Park. Roman Andreev from Russia completed one problem correctly in 1 hr 4 min and won Facebook's Hacker Cup to get his name placed on a...

Oracle Exadata Infiniband Switch default logins and world readable shadow file

Oracle Exadata Infiniband Switch default logins and world readable shadow file Hi Bugtraq List, I've noticed a minor issue with the 1/4 rack Oracle Exadata Solution. What is Exadata? From Oracle.com "Oracle Exadata is the only database machine that provides extreme performance for both data...

Fedora 15 : uzbl-0-0.26.20110402gite7578e27c.fc15 (2012-2364)

Lock down cookie file permissions to not be world-readable. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Facebook Game - Zynga's Indiana Jones Adventure World Detected (deprecated)

Binary data 6365.prm...

Facebook Game - Zynga's Cafe World Detected (deprecated)

Binary data 6358.prm...

Facebook Game - Wooga Monster World Detected (deprecated)

Binary data 6380.prm...

kexec-tools: Multiple security flaws by management of kdump core files and ramdisk images

The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, uses world-readable permissions for vmcore files, which allows local users to obtain sensitive information by inspecting the file...

CVE-2011-3479

Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, uses world-writable permissions for product-installation files, which allows local users to gain privileges by modifying a file...

Design/Logic Flaw

Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, uses world-writable permissions for product-installation files, which allows local users to gain privileges by modifying a file...

CVE-2011-3479

Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, uses world-writable permissions for product-installation files, which allows local users to gain privileges by modifying a file...