GHSA-GW46-8559-CGGP sosreport sensitive information disclosure via weak permissions of the generated archives

sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive...

Design/Logic Flaw

Kaspersky Anti-Virus 5.0 5.0.712; Antivirus Personal 5.0.x; Anti-Virus 6.0 6.0.3.837, 7 7.0.1.325, 2009 8.0.0.x, and 2010 9.0.0.463; and Internet Security 7 7.0.1.325, 2009 8.0.0.x, and 2010 9.0.0.463; use weak permissions Everyone:Full Control for the BASES directory, which allows local users to...

Information disclosure

MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions Everyone:Full Control for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe...