EUVD-2000-0360

Malware in sbrugna...

Wvdial / usb_modeswitch File Overwrite

Impact ====== Low Summary ======= When using usbmodeswitch and invoking pppd from wvdial in -detach mode. a /tmp/debug file is created. Local Attacker could overwrite arbitrary files. Example ======= ,file /tmp/debug debug: broken symbolic link to /etc/nologin' Insert stick and connect: ,su...

Слабые разрешения в wvdial (weak permission)

Файл wvdial.conf содержащий логин/пароль удаленного доступа открыт на чтение...

Wvdial insecure conf?

I've compiled and installed wvdial a dialer for dial up connection and the program wvdialconf generate a file called wvdial.conf. In this file : AT strings, username, pass and another setting like /etc/ppp/options. But now the problem, with ls -l -rw-r--r-- 1 root root 335 Aug 1 18:21 wvdial.conf...

CVE-2000-0361

The CVE-2000-0361 issue affects wvdial 1.4 and earlier, where the PPP wvdial.lxdialog script creates a .config file with world-readable permissions. This allows a local attacker who is in the dialout group to access login credentials stored in that file. The available connected sources confirm th...

CVE-2000-0361

The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information...

CVE-2000-0361: Undefined Security Weakness

The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information...

CVE-2000-0361

The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information...