Design/Logic Flaw

openhpi/Makefile.am in OpenHPI before 3.6.0 uses world-writable permissions for /var/lib/openhpi directory, which allows local users, when quotas are not properly setup, to fill the filesystem hosting /var/lib and cause a denial of service disk consumption...

CVE-2015-3248

openhpi/Makefile.am in OpenHPI before 3.6.0 uses world-writable permissions for /var/lib/openhpi directory, which allows local users, when quotas are not properly setup, to fill the filesystem hosting /var/lib and cause a denial of service disk consumption...

CVE-2015-3248

openhpi/Makefile.am in OpenHPI before 3.6.0 uses world-writable permissions for /var/lib/openhpi directory, which allows local users, when quotas are not properly setup, to fill the filesystem hosting /var/lib and cause a denial of service disk consumption...

CVE-2017-14428

D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices have 0666 /var/run/hostapd permissions...

CVE-2017-14424

D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices have 0666 /var/passwd permissions...

CVE-2017-7560

It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes...

CVE-2017-7560

It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes...

CVE-2017-7560

CVE-2017-7560 concerns the rhnsd daemon. Multiple connected documents reiterate that pid files are created world-writable, enabling a local attacker to fill disks or kill selected processes. This is a local-risk issue with impact on availability, as described in the sources. The provided document...

CVE-2017-7560

Removed by vendor...

PT-2017-17800

Name of the Vulnerable Software and Affected Versions Red Hat rhnsd affected versions not specified Description A security issue was discovered where rhnsd PID files are created with world-writable permissions, allowing local attackers to fill disks or terminate selected processes. Recommendation...

CVE-2017-7560: Insecure Temporary File

It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes...

CVE-2014-8677

The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or permissions to create arbitrary databases, or if PHP before 5.2 is being used, the configuration database is down, and...

CVE-2015-1378

cmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is sourced without checking that the local directory is writable by non-root users...

CVE-2015-1378

cmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is sourced without checking that the local directory is writable by non-root users...

PT-2017-6483

Name of the Vulnerable Software and Affected Versions grml-debootstrap versions 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 Description The issue arises from the file cmdlineopts.clp in grml-debootstrap, which is sourced without verifying that the local directory is writable by non-root users...

CVE-2017-4922

VMware vCenter Server 6.5 prior to 6.5 U1 contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. Successful exploitation of this issue may allow unprivileged host users to access certain critical...

Information disclosure

VMware vCenter Server 6.5 prior to 6.5 U1 contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. Successful exploitation of this issue may allow unprivileged host users to access certain critical...

CVE-2017-4922

VMware vCenter Server 6.5 prior to 6.5 U1 contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. Successful exploitation of this issue may allow unprivileged host users to access certain critical...

CVE-2017-4922: Exposure of Sensitive Information to an Unauthorized Actor

VMware vCenter Server 6.5 prior to 6.5 U1 contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. Successful exploitation of this issue may allow unprivileged host users to access certain critical...

PT-2017-16205

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 6.5 prior to 6.5 U1 Description The issue is related to an information disclosure problem. It occurs because the service startup script uses world-writable directories as temporary storage for critical informatio...