CuteNews News.txt writable to world

Date: August 29, 2004 Vender: http://www.cutephp.com/ Program: CuteNews Versions affected: = 1.3.6 Bug: CuteNews News.txt writable to world Type: Author: e0r www: http://www.rootthief.com/ team: !Sui-Generes !Sui Email: homicidal @ gmail . com ----------------------------- Discription: Cute news ...

CVE-2002-1518: Undefined Security Weakness

mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories...

CVE-2001-1069: Undefined Security Weakness

libCoolType library as used in Adobe Acrobat acroread on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior...

CVE-2002-1392: Undefined Security Weakness

faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges...

CVE-2003-0012: Undefined Security Weakness

The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-writable permissions for the data/mining directory when it runs, which allows local users to modify or delete the data...

a2ps -- insecure command line argument handling

Rudolf Polzer reports: a2ps builds a command line for file containing an unescaped version of the file name, thus might call external programs described by the file name. Running a cronjob over a public writable directory a2ps-ing all files in it - or simply typing "a2ps .txt" in /tmp - is...

RHEL 2.1 : tetex (RHSA-2002:195)

Updated packages for dvips are available which fix a vulnerability allowing print users to execute arbitrary commands. Updated 13 Aug 2003 Added tetex-doc package that was originally left out of the errata. The dvips utility converts DVI format into PostScriptTM, and is used in Red Hat Linux as a...

wgetuhoh.txt

Tested software: Wget 1.9, Wget 1.9.1 Wget checks for the presence of a file with the same name of the one invoqued at the command line, if the file exists, then it saves the downloaded file with a different name. The problem is that Wget does not lock the file, and directly writes to it. So...

HP-UX GTK+ weak permissions

World-writable directory...

CVE-2003-1034

The RPM installation of SAP DB 7.x creates the 1 dbmsrv or 2 lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs...

Borland Interbase weak permissions

File /opt/interbase/admin.ib is world writable...

CVE-2003-1034

The RPM installation of SAP DB 7.x creates the 1 dbmsrv or 2 lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs...

CVE-2003-1034

The CVE-2003-1034 issue affects SAP DB 7.x when installed as an RPM: the dbmsrv and lserver binaries are created with world-writable permissions, enabling local users to modify these executables and escalate privileges. This is a local privilege escalation vulnerability due to insufficient file p...

CVE-2003-1034: Undefined Security Weakness

The RPM installation of SAP DB 7.x creates the 1 dbmsrv or 2 lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs...

CVE-2004-0167

DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media...

mformat privilege escalation

It's possible to access any file for reading and create world-writable root-owned files...

Apple Mac OS X contains a vulnerability in DiskArbitration when initializing writable removable media

Overview Apple Mac OS X contains a vulnerability in the way DiskArbitration initializes writable removable media. Description The DiskArbitration Server in Apple Mac OS X tracks new disks and provides notifications announcing their availability. There is a non-specific vulnerability identified as...

Serv-U SITE CHMOD Command Multiple Vulnerabilities

The remote host is running Serv-U FTP Server. There is a bug in the way the server handles arguments to the SITE CHMOD requests that could allow an attacker to trigger a buffer overflow or corrupt memory in the server and disable it remotely or to potentially execute arbitrary code on the host...

RhinoSoft Serv-U FTPd Server 3.x4.x - SITE CHMOD Remote Overflow

RhinoSoft Serv-U FTPd Server 3.x4.x - SITE CHMOD Remote Overflow / ----------------------------------------------------------------------- Servu.c - Serv-U FTPD 3.x/4.x "SITE CHMOD" Command Remote stack buffer overflow exploit Copyright C 2004 HUC All Rights Reserved. Author : lion :...

RhinoSoft Serv-U FTPd Server 3.x/4.x - 'SITE CHMOD' Remote Overflow

/ ----------------------------------------------------------------------- Servu.c - Serv-U FTPD 3.x/4.x "SITE CHMOD" Command Remote stack buffer overflow exploit Copyright C 2004 HUC All Rights Reserved. Author : lion : [email protected] : http://www.cnhonker.com Date : 2004-01-25 : 2004-01-25 v1...