EUVD-1999-0833

Malware in sbrugna...

CVE-1999-0852

IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin...

CVE-1999-0852: Undefined Security Weakness

IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin...

ibm.websphere.txt

On solaris maybe also AIX the installation of WebSphere from IBM installs a deinstallation shell script in /usr/bin with protection 777. This script is also called by 'pkgrm', which has to be issued by root. The script can therefore be easily used for placing a troian horse etc. Besides this...