CVE-1999-1545

Joe's Own Editor joe 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users...

CVE-1999-1546

netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable...

CVE-1999-1429

DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver...

CVE-1999-1250

The CVE-1999-1250 entry describes a vulnerability in the CGI component of the Lasso application by Blue World (used on WebSTAR and other servers). The flaw allows remote attackers to read arbitrary files via the CGI program. The provided sources confirm the affected product and the impact (unauth...

CVE-1999-1274

The CVE-1999-1274 entry affects iPass RoamServer 3.1, describing that it creates temporary files with world-writable permissions. This is the stated vulnerability detail; no explicit root cause, impact, affected versions beyond the version number, or remediation are provided in the supplied docum...

CVE-1999-1274: Undefined Security Weakness

iPass RoamServer 3.1 creates temporary files with world-writable permissions...

CVE-1999-1338: Undefined Security Weakness

Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions...

CVE-1999-1350: Undefined Security Weakness

ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local users to gain privileges by replacing a program with a Trojan horse...

CVE-1999-1546: Undefined Security Weakness

netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable...

CVE-1999-1405: Undefined Security Weakness

snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap...

CVE-1999-1536: Undefined Security Weakness

.sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file...

CVE-1999-1071: Undefined Security Weakness

Excite for Web Servers EWS 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file...

CVE-1999-1250: Undefined Security Weakness

Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read arbitrary files...

CVE-1999-1042: Undefined Security Weakness

Cisco Resource Manager CRM 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings...

CVE-1999-1173: Undefined Security Weakness

Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to 1 modify Word Perfect behavior by modifying files in the working directory, or 2 modify files of other users via a symlink attack...

CVE-1999-1545: Undefined Security Weakness

Joe's Own Editor joe 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users...

CVE-1999-1429: Undefined Security Weakness

DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver...

CVE-2001-1017

rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could allow local users to gain privileges by reading the copied file while rmuser is running, obtain the password hashes, and crack the passwords...

CVE-2001-1069

libCoolType library as used in Adobe Acrobat acroread on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior...

Adobe Acrobat creates world writable ~/AdobeFnt.lst files

Adobe Acrobat creates world writable /AdobeFnt.lst files This problem is present in at least the Linux version: ftp://ftp.adobe.com/pub/adobe/acrobatreader/unix/4.x/linux-ar-405.tar.gz Even with umask as restrictive as 077, the Adobe binary explicitly creates and changes the AdobeFnt.lst file in...