Code injection

A package component in Sun Storage Automated Diagnostic Environment StorADE 2.4 uses world-writable permissions for certain critical files and directories, which allows local users to gain privileges...