Oracle Exadata Infiniband Switch suffers from default logins and a world readable shadow file.
67413524dd27c39c82098d438c4bbf6dMambo CMS version 4.6.5 suffers from denial of service, poor permission use and path disclosure vulnerabilities.
22792a578c50ea1cb02e8e1e12adc1aabzexe suffers from a /tmp race condition that allows for local root compromise.
6c2e36b369f77386982e853497638a5aPerl Cache-Cache version 1.06 suffers from an insecure permission vulnerability.
712ddaf1f88a957eb2de3c821492f053Solaris Update manager and Sun Patch Cluster suffer from a symlink vulnerability.
93497148c976127f0595e511ce60b5e8The PatchLink Update Unix Client suffers from multiple file clobbering vulnerabilities allowing for privilege escalation.
accb2094f8acdb59cfd1d62387563748IBM Informix (IDS) V10.0 suffers from several flaws that could allow an attacker to overwrite any file on the system or inject commands into the installer scripts.
b4a6fa745c48abc2169cb2b6d56e9c0eThe htpasswd program shipped with thttpd-2.25b can be tricked into executing arbitrary programs.
eab8f95491dc8f2fc1aaae66bee535c1It appears that the new Apache release 1.3.33 still is susceptible to a local buffer overflow discovered in htpasswd under release 1.3.31.
0dffea6c50d00010978b25dafae6accciDEFENSE Security Advisory 03.19.04: Exploitation of default file permissions in Borland Interbase can allow local attackers to gain database administrative privileges. The vulnerability specifically exists due to insecure permissions on the admin.ib user database file. Local attackers can add or modify existing accounts to gain administrative privileges.
08bc0ef21f02718f607d01cd1cc3ffc9