17 matches found
PT-2026-61715
Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.4.3 Description rsync is a file-copying tool utilizing a delta-transfer algorithm to synchronize files. A symlink race condition exists in path-based system calls such as chmod and chown, as previous fixes for open...
PT-2025-46897
Name of the Vulnerable Software and Affected Versions Dell Alienware Command Center versions prior to 6.10.15.0 Description Dell Alienware Command Center 6.x has an issue involving insecure temporary files. A local attacker with limited privileges could potentially modify information...
CVE-2020-10553: Incorrect Permission Assignment for Critical Resource
An issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\Psyprax32\PPScreen.ini contains a hash for the lockscreen aka screensaver of the application. If that entry is removed, the lockscreen is no longer displayed and the app is no longer locked. All local users are able to modify...
CVE-2012-5477: Undefined Security Weakness
The smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify files created by the daemon via unspecified vectors...
CVE-2014-0018: Undefined Security Weakness
Red Hat JBoss Enterprise Application Platform JBEAP 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container MSC service registry, which allows local users to modify the server via a crafted deployment...
UBUNTU-CVE-2013-5724
Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations...
CVE-2012-6119: Undefined Security Weakness
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests...
packstack: answerfile creation permissions issue
PackStack 2012.2.3 in Red Hat OpenStack Essex and Folsom can create the answer file in insecure directories such as /tmp or the current working directory, which allows local users to modify deployed systems by changing this file...
Candlepin: bootstrap RPM deploys CA certificate file with mode 666
modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions 666 for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file...
CVE-2011-2779: Undefined Security Weakness
Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...
DEBIAN-CVE-2009-4029
The 1 dist or 2 distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions 777 to directories in the build tree, which introduces a race condition that allo...
CVE-2008-1596: Undefined Security Weakness
Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchkblockwrite function, which might allow local users to modify trusted files, related to missing checks in the TSDFILESLOCK policy for modifications performed via hard links, a different vulnerability than...
CVE-2006-5817: Undefined Security Weakness
prldhcpd in Parallels Desktop for Mac Build 1940 uses insecure permissions 0666 for /Library/Parallels/.dhcpdconfiguration, which allows local users to modify DHCP configuration...
CVE-2002-0570: Undefined Security Weakness
The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key...
CVE-2002-0225: Undefined Security Weakness
tacplus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files...
