9751 matches found
CVE-2005-0444
VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code...
VMWare virtual machine privilege escalation
Dynamic libraries are searched in world writable directory...
CVE-2005-0444: Undefined Security Weakness
VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code...
CVE-2005-0444
VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code...
CVE-2002-1590: Undefined Security Weakness
The Web-Based Enterprise Management WBEM packages 1 SUNWwbdoc, 2 SUNWwbcou, 3 SUNWwbdev and 4 SUNWmgapp packages, when installed using Solaris 8 Update 1/01 or later, install files with world or group write permissions, which allows local users to gain root privileges or cause a denial of service...
security flaw
Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack...
USN-75-1: cpio vulnerability
Recently it was discovered that cpio created world-writeable files when used in -o/--create mode with giving an output file with -O. This allowed any user to modify the created cpio archives. Now cpio respects the current umask setting of the user. Note: This vulnerability has already been fixed ...
CVE-2005-0142
Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such a...
CVE-2004-1340
Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pamradiusauth.conf set to be world-readable, which allows local users to obtain sensitive information...
CVE-2005-0142: Undefined Security Weakness
Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such a...
DEBIAN-CVE-2004-1340
Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pamradiusauth.conf set to be world-readable, which allows local users to obtain sensitive information...
Opened attachments are temporarily saved world-readable — Mozilla
Mozilla software released after March 2004 saves some temporary files with world-readable permissions. In the browser this is primarily content fed to helper applications for example, PDF files, and in the mail clients it is attachments...
CVE-2005-0118
CVE-2005-0118 affects helvis 1.8h2_1 and earlier. The vulnerability arises because recovery files are stored in world-readable directories with world-readable permissions, allowing local users to read recovered files of other users. Multiple sources (NVD/CVE, FreeBSD VuXML and OpenVAS entries) co...
CVE-2005-0118
helvis 1.8h21 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to read the recovered files of other users...
CVE-2005-0118: Undefined Security Weakness
helvis 1.8h21 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to read the recovered files of other users...
newsgrab -- insecure file and directory creation
The newsgrab script uses insecure permissions during the creation of the local output directory and downloaded files. After a file is created, permissions on it are set using the mode value of the newsgroup posting. This can potentially be a problem when the mode is not restrictive enough. In...
CVE-2004-2303
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files...
CVE-2004-2615
The documentation for CuteNews 1.3.6 and possibly other versions specifies that files under cutenews/data must be manually given world-writable permissions, which allows local users to insert false news, delete news, and possibly gain privileges or have other unknown impact...
CVE-2004-0952
HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the addnewclient command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption...