>> IBM Lotus Notes for Linux Multiple Insecure File Permission Vulnerabilities
Title : IBM Lotus Notes for Linux Multiple Insecure File Permission Vulnerabilities VUPEN ID : VUPEN/ADV-2007-4037 CVE ID : CVE-2007-6594
Rated as : Low Risk
Remotely Exploitable : No Locally Exploitable : Yes Release Date : 2007-11-29
Technical Description
Multiple vulnerabilities have been identified in IBM Lotus Notes for Linux, which could be exploited by malicious users to bypass security restrictions and potentially compromise a vulnerable system. These issues are caused due to insecure permissions being set on extracted binaries and the installdata file when executing the installer program, which could be exploited by a local attacker to modify arbitrary files such that subsequent installs performed by the root user could deploy malicious content or code to end user systems.
