CVE-2004-2337

The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local users to obtain user POP3 credentials...

CVE-2004-2337

The CVE-2004-2337 entry concerns the file /.inlook/.crypt in inlook 0.7.3 and earlier, which is installed with world readable permissions. This allows local users to access POP3 credentials stored by the application. The root cause is improper permissions on the .crypt file, leading to confidenti...

CVE-2005-2582

Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 uses world-writable permissions for the 1 log and 2 license directory, which allows local users to delete log files, append to arbitrary files via a symlink attack on kavmonitor.log, or delete license keys and prevent keepup2date from properl...

CVE-2004-2337: Undefined Security Weakness

The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local users to obtain user POP3 credentials...

CVE-2004-2303: Undefined Security Weakness

MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files...

CVE-2005-2582: Undefined Security Weakness

Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 uses world-writable permissions for the 1 log and 2 license directory, which allows local users to delete log files, append to arbitrary files via a symlink attack on kavmonitor.log, or delete license keys and prevent keepup2date from properl...

CVE-2002-2118

Buffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a denial of service via a long URL...

CVE-2002-2118

CVE-2002-2118 affects Blue World Lasso Web Data Engine 3.6.5. A buffer overflow in the URL handling allows remote attackers to trigger a denial of service. The available description confirms a network-facing vector via a long URL, with impact limited to DoS; no additional exploit details, affecte...

CVE-2002-2118: Undefined Security Weakness

Buffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a denial of service via a long URL...

CVE-2005-2444: Undefined Security Weakness

Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the file after login, which allows local users to obtain sensitive information...

CVE-2004-2228

Mozilla Firefox before 1.0 is installed with world-writable permissions on Mac OS X, which allows local users to gain privileges...

CVE-2004-2228: Undefined Security Weakness

Mozilla Firefox before 1.0 is installed with world-writable permissions on Mac OS X, which allows local users to gain privileges...

CVE-2001-1530: Undefined Security Weakness

run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands...

CVE-2005-2212

CVE-2005-2212 concerns Backup Manager 0.5.8a, which creates an archive repository with world-readable and world-writable permissions. This misconfiguration can let attackers modify or read the repository contents. The available sources (NVD/Red Hat/CVE entries) reiterate the same impact; no expli...

CVE-2005-2212

Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read the repository...

CVE-2005-2212

Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read the repository...

CVE-2005-2212: Undefined Security Weakness

Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read the repository...

Debian Linux apt-setup weak permissions

apt.conf file is created world readable...

CVE-2005-2136

Raritan Dominion SX DSX Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set 1 world-readable permissions for /etc/shadow and 2 world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users...

CVE-2002-1956

CVE-2002-1956 affects ROX Filer versions 1.1.9 and 1.2. The issue is due to world-writable permissions, enabling local users to write to arbitrary files. No remediation or exploit details are provided in the connected documents.