9751 matches found
CVE-2002-1672: Undefined Security Weakness
Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions world readable, which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials...
CVE-2002-1737: Undefined Security Weakness
Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files...
CVE-2002-1713: Incorrect Default Permissions
The Standard security setting for Mandrake-Security package msec in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files...
CVE-2002-1669: Undefined Security Weakness
pkgadd in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify world-writable parts of the package during installation...
CVE-2005-1941: Incorrect Default Permissions
SilverCity before 0.9.5-r1 installs 1 cgi-styler-form.py, 2 cgi-styler.py, and 3 source2html.py with read and write world permissions, which allows local users to execute arbitrary code...
PT-2005-2892 · Silvercity · Silvercity
Name of the Vulnerable Software and Affected Versions: SilverCity versions prior to 0.9.5-r1 Description: The issue allows local users to execute arbitrary code due to the installation of certain files with read and write world permissions. The affected files include cgi-styler-form.py,...
kdbg security update
CentOS Errata and Security Advisory CESA-2005:416-01 An updated kdbg package that fixes a minor security issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. Kdbg is a K Desktop Environment KDE GUI...
CVE-2004-2133
Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries that are created in world-writable directories suc...
CVE-2004-2133: Undefined Security Weakness
Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries that are created in world-writable directories suc...
Qpopper: Multiple Vulnerabilities
Background Qpopper is a widely used server for the POP3 protocol. Description Jens Steube discovered that Qpopper doesn't drop privileges to process local files from normal users CAN-2005-1151. The upstream developers discovered that Qpopper can be forced to create group or world writeable files...
[SA15386] Cheetah Insecure Module Importing Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Cheetah Insecure Module Importing Vulnerability SECUNI...
CVE-2004-1997
CVE-2004-1997 : Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be world-readable and allow local users to gain privileges. The NVD entry lists a CVSSv2 base score of 4.6 (LOCAL access, LOW attack complexity, PARTIAL confidentiality/integrity/availability impacts). ...
CVE-2004-1933
The CVE-2004-1933 entry affects Citadel/UX versions 5.00–6.14. The underlying issue is that the database directory and files are installed with world-read permissions, enabling local users to bypass access controls and read messages that should be restricted. This is described consistently across...
CVE-2004-1833
The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges...
CVE-2004-1933
Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages...
CVE-2004-1997
Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges...
CVE-2004-1833
CVE-2004-1833 affects Borland Interbase 7.1 on Linux. The admin.ib file has default world-writable permissions, enabling local users to gain database administrative privileges (privilege escalation). No remediation details are provided in the supplied documents; mode is based on the concrete desc...
CVE-2004-1933: Undefined Security Weakness
Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages...
CVE-2004-1833: Undefined Security Weakness
The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges...