2 matches found
CVE-2002-1970
SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers...
CVE-2002-1970
CVE-2002-1970 (SnortCenter 0.9.5) : When configured to push Snort rules, SnortCenter stores the rules in a temporary file that has world-readable and world-writable permissions. This insecure permission set can allow local users to access the file and obtain usernames and passwords for the alert ...