EUVD-2006-5948

Malware in sbrugna...

CVE-2006-5965

PassGo SSO Plus 2.1.0.32, and probably earlier versions, uses insecure permissions Everyone/Full Control for the PassGo Technologies directory, which allows local users to gain privileges by modifying critical programs...

CVE-2006-5965

PassGo SSO Plus 2.1.0.32, and probably earlier versions, uses insecure permissions Everyone/Full Control for the PassGo Technologies directory, which allows local users to gain privileges by modifying critical programs...

Passgo SSO Plus本地不安全默认目录权限漏洞

SSO Plus是一个密码管理器。 SSO Plus在安装软件时设置了不安全的访问权限，本地攻击者可能利用此漏洞非授权获取敏感信息。 SSO Plus对PassGo Technologies目录及其所有子目录设置了不安全的权限，允许Everyone组Full Control的权限。本地攻击者可以利用这个漏洞获得对该目录的完全控制。 PassGo SSO Plus 2.1.0.32 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.passgo.com/...

Secunia Research: PassGo SSO Plus Insecure Default Directory Permissions

====================================================================== Secunia Research 22/11/2006 - PassGo SSO Plus Insecure Default Directory Permissions - ====================================================================== Table of Contents Affected...

PassGo SSO Plus weak permissions

Weak installation folder permissions...