CWE-276

Medium likelihood

Incorrect Default Permissions

Parent: CWE-732 - Incorrect Permission Assignment for Critical Resource

During installation, installed file permissions are set to allow anyone to modify those files.

1,512 vulnerabilities with CWE-276
CVE-2011-2859
Google Chrome < 14.0.835.163 - Incorrect Default Permissions for Non-Gallery Pages
CVE-2011-2782
Google Chrome < 13.0.782.107 - Unauthenticated Incorrect Default Permissions via Drag-and-Drop
CVE-2011-1435
Google Chrome <11.0.696.57 - Info Disclosure
CVE-2010-5108 HIGH
Trac 0.11.6 - Incorrect Default Permissions in Ticket Workflow
CVSS 7.5
CVE-2010-4176
dracut and udev - Incorrect Default Permissions for /dev/systty
CVE-2006-5014 HIGH
cPanel <10.9.0 - Privilege Escalation
CVSS 8.8
CVE-2005-1941 HIGH
SilverCity < 0.9.5_r1 - Local Arbitrary Code Execution via Insecure File Permissions
CVSS 7.8
CVE-2004-1778
Skype 0.92.0.12 and 1.0.0.1 - Incorrect Default Permissions in Language Directory
CVE-2002-1713 MEDIUM
Mandrake Linux 8.2 - Unprotected User Data Exposure via Home Directory Permissions
CVSS 5.5
CVE-2002-1844 HIGH
Windows Media Player 6.3 on Solaris - Incorrect Default Permissions
CVSS 7.8
CVE-2001-0497 HIGH
BIND < 8.2.4 - Insecure Permissions for TSIG Key File
CVSS 7.8
CVE-1999-0426 CRITICAL
SUSE Linux - Incorrect Default Permissions in /dev/kmem
CVSS 9.8
Details
Vulnerabilities 1,512
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits