eXtplorer 2.1.0b6 uses world writable permissions for the /var/lib/extplorer/ftp_tmp directory, which allows local users to delete or overwrite arbitrary files.
References
Configurations
History
21 Nov 2024, 01:40
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.openwall.com/lists/oss-security/2012/08/03/7 - | |
References | () http://www.securityfocus.com/bid/54801 - |
Information
Published : 2012-08-07 20:55
Updated : 2024-11-21 01:40
NVD link : CVE-2012-3454
Mitre link : CVE-2012-3454
CVE.ORG link : CVE-2012-3454
JSON object : View
Products Affected
extplorer
- extplorer
CWE
CWE-264
Permissions, Privileges, and Access Controls