333 matches found
CVE-2002-0805
Bugzilla 2.14 before 2.14.2 and 2.16 before 2.16rc2 contain two issues: (1) creation of new directories with world-writable permissions, and (2) creation of the params file with world-writable permissions. These flaws allow local users to modify the files and execute code. The provided sources co...
CVE-2002-0805
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, 1 creates new directories with world-writable permissions, and 2 creates the params file with world-writable permissions, which allows local users to modify the files and execute code...
CVE-2002-1956
ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to write to arbitrary files...
CVE-2002-1791
SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrupt those files...
CVE-2002-1844
Microsoft Windows Media Player WMP 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the executables to gain privileges...
CVE-2002-1956
ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to write to arbitrary files...
PT-2002-2566 · Microsoft · Windows Media Player
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Player WMP version 6.3 Description: The issue allows local users to gain privileges by deleting or modifying executables due to world-writable permissions. Recommendations: For Microsoft Windows Media Player WMP versio...
Important: Red Hat Security Advisory: tetex security update
Updated packages for dvips are available which fix a vulnerability allowing print users to execute arbitrary commands. Updated 13 Aug 2003 Added tetex-doc package that was originally left out of the errata. The dvips utility converts DVI format into PostScriptTM, and is used in Red Hat Linux as a...
CVE-2002-0529
HP Photosmart printer driver for Mac OS X installs the hpimagingconnectivity program and the hpimagingconnectivity.app directory with world-writable permissions, which allows local users to gain privileges of other Photosmart users by replacing hpimagingconnectivity with a Trojan horse...
CVE-2002-0805
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, 1 creates new directories with world-writable permissions, and 2 creates the params file with world-writable permissions, which allows local users to modify the files and execute code...
CVE-2001-1079
CVE-2001-1079 concerns the creation of keyfile directories with world-writable permissions in PSSP 3.2 with DCE 3.1 authentication on AIX. The underlying issue is that a local user can exploit these permissions to delete key files, leading to a denial of service. The description specifies the aff...
CVE-2002-0529
HP Photosmart printer driver for Mac OS X installs the hpimagingconnectivity program and the hpimagingconnectivity.app directory with world-writable permissions, which allows local users to gain privileges of other Photosmart users by replacing hpimagingconnectivity with a Trojan horse...
CVE-2002-0295
Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain privileges...
CVE-1999-1027
Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program...
CVE-2001-1079
createkeyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service...
CVE-2001-0988
Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information...
CVE-1999-1173
CVE-1999-1173 affects Corel WordPerfect 8 for Linux, where a temporary working directory is created with world-writable permissions. This can let local users (1) modify WordPerfect behavior by changing files in the working directory, or (2) modify other users’ files via a symlink attack. The prov...
CVE-1999-1338
Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions...
CVE-1999-1274
The CVE-1999-1274 entry affects iPass RoamServer 3.1, describing that it creates temporary files with world-writable permissions. This is the stated vulnerability detail; no explicit root cause, impact, affected versions beyond the version number, or remediation are provided in the supplied docum...