Oracle 8 8.1.5 - Intelligent Agent (2)

// source: https://www.securityfocus.com/bid/585/info A vulnerability in the Oracle Intelligent Agent allows local malicious users to execute arbitrary commands and to create world writable files as the root user. The problem lies in the dbsnmp program located in $ORACLEHOME/bin . This setuid roo...

Oracle 8 8.1.5 - Intelligent Agent (1)

source: https://www.securityfocus.com/bid/585/info A vulnerability in the Oracle Intelligent Agent allows local malicious users to execute arbitrary commands and to create world writable files as the root user. The problem lies in the dbsnmp program located in $ORACLEHOME/bin . This setuid root a...

Oracle 8 8.1.5 - Intelligent Agent (2)

Oracle 8 8.1.5 - Intelligent Agent 2 // source: https://www.securityfocus.com/bid/585/info A vulnerability in the Oracle Intelligent Agent allows local malicious users to execute arbitrary commands and to create world writable files as the root user. The problem lies in the dbsnmp program located...

CVE-1999-1536

.sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file...

CVE-1999-1338

Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions...

BMC Software Patrol 3.2.5 - Patrol SNMP Agent File Creation/Permission

source: https://www.securityfocus.com/bid/525/info Patrol 3.2, installed out of the box, allows for a local root compromise or denial of service. The vulnerability lies in the creation of a file by snmpagnt that is owned by the owner of the parent directory of the file and possibly world writeabl...

BMC Software Patrol 3.2.5 - Patrol SNMP Agent File CreationPermission

BMC Software Patrol 3.2.5 - Patrol SNMP Agent File CreationPermission source: https://www.securityfocus.com/bid/525/info Patrol 3.2, installed out of the box, allows for a local root compromise or denial of service. The vulnerability lies in the creation of a file by snmpagnt that is owned by the...

CVE-1999-1546

netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable...

CVE-1999-1173

Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to 1 modify Word Perfect behavior by modifying files in the working directory, or 2 modify files of other users via a symlink attack...

Excite for Web Servers 1.1 - Administrative Password

Excite for Web Servers 1.1 - Administrative Password source: https://www.securityfocus.com/bid/2665/info Excite for Web Servers 1.1 EWS is a search engine suite for web servers running under Windows NT and UNIX. By default the file containing the administrative password, architext.conf, is world...

[SECURITY] Debian not affected by samba problems

There have been reports that some Linux distributions are affected by a vulnerability in samba. There are two issues: the wsmbconf program which is still a prototype application not meant for general release is unsafe. Debian does not distribute this program. some distributions used a...

[SECURITY] Debian not affected by samba problems

There have been reports that some Linux distributions are affected by a vulnerability in samba. There are two issues: the wsmbconf program which is still a prototype application not meant for general release is unsafe. Debian does not distribute this program. some distributions used a...

CVE-1999-1027

Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program...

CVE-1999-1429

DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver...

CVE-1999-1274

iPass RoamServer 3.1 creates temporary files with world-writable permissions...

CVE-1999-1138

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories 1 /tmp for the dos user, and 2 /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable...