CVE-2006-2790: Undefined Security Weakness

A package component in Sun Storage Automated Diagnostic Environment StorADE 2.4 uses world-writable permissions for certain critical files and directories, which allows local users to gain privileges...

Design/Logic Flaw

Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors...

CVE-2006-1830

Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors...

CVE-2006-1830

Sun Java Studio Enterprise 8 is affected by CVE-2006-1830: when installed as root it creates certain files with world-writable permissions, enabling local users to execute arbitrary commands via unspecified vectors. The NVD entry documents this behavior and impact, with low base score (0.7) on CV...

CVE-2006-1830: Undefined Security Weakness

Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors...

Code injection

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup...

CVE-2006-0623

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup...

CVE-2006-0623

CVE-2006-0623 is associated with QNX Neutrino RTOS 6.3.0. The vulnerability arises because /etc/rc.d/rc.local is shipped with world-writable permissions, allowing local users to modify the file and thereby execute arbitrary code at system startup. The connected records confirm the affected softwa...

CVE-2006-0623

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup...

CVE-2006-0623: Undefined Security Weakness

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup...

Code injection

Dave Nielsen and Patrick Breitenbach PayPal Web Services aka PHP Toolkit 0.50 and possibly earlier has 1 world-readable permissions for ipn/logs/ipnsuccess.txt, which allows local users to view sensitive information payment data, and 2 world-writable permissions for ipn/logs, which allows local...

CVE-2006-0202

CVE-2006-0202 affects PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier. The issue is due to insecure filesystem permissions: ipn/logs/ipn_success.txt is world-readable, allowing local users to view payment data, and ipn/logs is world-writable, enabling local users to delete or repl...

CVE-2004-2615: Undefined Security Weakness

The documentation for CuteNews 1.3.6 and possibly other versions specifies that files under cutenews/data must be manually given world-writable permissions, which allows local users to insert false news, delete news, and possibly gain privileges or have other unknown impact...

CVE-2005-3291

Stani's Python Editor SPE 0.7.5 is installed with world-writable permissions, which allows local users to gain privileges by modifying executable files...

CVE-2005-3291

SPE 0.7.5 on Gentoo is affected by world-writable file permissions, allowing a local user to modify executables and potentially execute arbitrary code with the user’s privileges. The Gentoo GLSA 200510-13 and Gentoo advisory GLSA describe the issue and recommend upgrading SPE to the latest versio...

CVE-2005-3291: Undefined Security Weakness

Stani's Python Editor SPE 0.7.5 is installed with world-writable permissions, which allows local users to gain privileges by modifying executable files...

CVE-2005-2656

Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service disk consumption and possibly perform other unauthorized activities...

CVE-2005-2656

Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service disk consumption and possibly perform other unauthorized activities...

CVE-2005-2656: Undefined Security Weakness

Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service disk consumption and possibly perform other unauthorized activities...

CVE-2004-0952: Undefined Security Weakness

HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the addnewclient command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption...