2724 matches found
CVE-2005-2444: Undefined Security Weakness
Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the file after login, which allows local users to obtain sensitive information...
kdebase -- Kate backup file permission leak
A KDE Security Advisory explains: Kate / Kwrite create a file backup before saving a modified file. These backup files are created with default permissions, even if the original file had more strict permissions set. Depending on the system security settings, backup files might be readable by othe...
CVE-2005-2212
CVE-2005-2212 concerns Backup Manager 0.5.8a, which creates an archive repository with world-readable and world-writable permissions. This misconfiguration can let attackers modify or read the repository contents. The available sources (NVD/Red Hat/CVE entries) reiterate the same impact; no expli...
CVE-2005-2212
Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read the repository...
CVE-2005-2212
Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read the repository...
CVE-2005-2212: Undefined Security Weakness
Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read the repository...
CVE-2004-2203: Undefined Security Weakness
Ansel 1.2 through 2.0 uses insecure default permissions, which allows remote attackers to gain access to web readable directories...
Debian Linux apt-setup weak permissions
apt.conf file is created world readable...
imail.cookie.txt
Neither Regular or secure mode of Imail properly give out a hash on cookies leaving the cookies straight readable to any onlookers. No exploit is needed POC: "IMailUserId 1006332dgd2@Someserver" -------------------------- "IMailpassword 1234" Straight From Cookie ^^ edited to protect user Shoutz ...
CVE-2005-2136
Raritan Dominion SX DSX Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set 1 world-readable permissions for /etc/shadow and 2 world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users...
CVE-2002-1970: Undefined Security Weakness
SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers...
CVE-2002-1711
BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments...
CVE-2002-1713
The CVE-2002-1713 issue affects Mandrake Linux 8.2, where the Standard security setting for the Mandrake-Security package (msec) installs home directories with world-readable permissions. This local-file-permission flaw could allow a local user to view other users’ files. The connected PT-2002-24...
CVE-2001-1481
Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to gain privileges...
CVE-2002-1713
The Standard security setting for Mandrake-Security package msec in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files...
CVE-2002-1711: Undefined Security Weakness
BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments...
CVE-2002-1713: Incorrect Default Permissions
The Standard security setting for Mandrake-Security package msec in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files...
CVE-2002-1672: Undefined Security Weakness
Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions world readable, which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials...
CVE-2004-1997
CVE-2004-1997 : Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be world-readable and allow local users to gain privileges. The NVD entry lists a CVSSv2 base score of 4.6 (LOCAL access, LOW attack complexity, PARTIAL confidentiality/integrity/availability impacts). ...