CVE-2006-5965

PassGo SSO Plus 2.1.0.32 (and possibly earlier) is affected by insecure default permissions on the PassGo Technologies directory, granting Everyone/Full Control. Local users can exploit this to modify critical program files and escalate privileges. The issue stems from overly permissive directory...