1468 matches found
CVE-2006-4124
The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUGFILE environment variable, which is used to create world-writable files when libXm is run from a setuid program...
[UNIX] Liblesstif Local Root (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2006-2790
A package component in Sun Storage Automated Diagnostic Environment StorADE 2.4 uses world-writable permissions for certain critical files and directories, which allows local users to gain privileges...
Code injection
A package component in Sun Storage Automated Diagnostic Environment StorADE 2.4 uses world-writable permissions for certain critical files and directories, which allows local users to gain privileges...
CVE-2006-2790
A package component in Sun Storage Automated Diagnostic Environment StorADE 2.4 uses world-writable permissions for certain critical files and directories, which allows local users to gain privileges...
CVE-2006-2790
Technical details about CVE-2006-2790 are not publicly available in the provided documents; StorADE 2.4 is described to use world-writable permissions, but no vendor/version/fix information is provided here. Monitor for updates.
CVE-2006-2542
xmcdconfig in xmcd for Debian GNU/Linux 2.6-17.1 creates /var/lib/cddb and /var/lib/xmcd/discog with world writable permissions, which allows local users to cause a denial of service disk consumption...
CVE-2006-2542
xmcdconfig in xmcd for Debian GNU/Linux 2.6-17.1 creates /var/lib/cddb and /var/lib/xmcd/discog with world writable permissions, which allows local users to cause a denial of service disk consumption...
Design/Logic Flaw
Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors...
CVE-2006-1830
Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors...
CVE-2006-1830
Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors...
CVE-2006-1830
Sun Java Studio Enterprise 8 is affected by CVE-2006-1830: when installed as root it creates certain files with world-writable permissions, enabling local users to execute arbitrary commands via unspecified vectors. The NVD entry documents this behavior and impact, with low base score (0.7) on CV...
Sun Java Studio Enterprise weak file permissions
Some files are installed world-writable...
CVE-2006-1376
The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable permissions, which allows local users to cause a denial of service disk consumption...
DEBIAN-CVE-2006-1376
The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable permissions, which allows local users to cause a denial of service disk consumption...
CVE-2006-1376
The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable permissions, which allows local users to cause a denial of service disk consumption...
Design/Logic Flaw
The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable permissions, which allows local users to cause a denial of service disk consumption...
CVE-2006-1376
The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable permissions, which allows local users to cause a denial of service disk consumption...
CVE-2005-2713
CVE-2005-2713 concerns local privilege escalation in Mac OS X. The iDefense advisory details two related issues in the /usr/bin/passwd binary on affected builds (Mac OS X 10.3.9 and 10.4.5; server variants also mentioned): first, passwd accepts a password database option and does not verify write...