CVE-2006-5965

PassGo SSO Plus 2.1.0.32 (and possibly earlier) is affected by insecure default permissions on the PassGo Technologies directory, granting Everyone/Full Control. Local users can exploit this to modify critical program files and escalate privileges. The issue stems from overly permissive directory...

Secunia Research: PassGo SSO Plus Insecure Default Directory Permissions

====================================================================== Secunia Research 22/11/2006 - PassGo SSO Plus Insecure Default Directory Permissions - ====================================================================== Table of Contents Affected...