EUVD-2003-0012

Malware in sbrugna...

Etomite followup information

---------- Forwarded message ---------- From: Rick Elnor To: [email protected] Date: Sun, 29 Jan 2006 10:11:08 -0800 Subject: OSVDB Mods Change Request 22693: Etomite todo.inc.php cij Variable Arbitrary Command Execution Hello, I am Rick Elnor, the Etomite CMS security expert and owner ow...

CVE-2003-0012: Undefined Security Weakness

The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-writable permissions for the data/mining directory when it runs, which allows local users to modify or delete the data...