CVE-2003-1460

Worker Filemanager 1.0 through 2.7 sets the permissions on the destination directory to world-readable and executable while copying data, which could allow local users to obtain sensitive information.

Score

CVSS 2.0 3.6 Low

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Worker Filemanager (Ralf Hoffmann)

References

• http://www.boomerangsworld.de/worker/wchanges.php3?lang=en
• http://www.securityfocus.com/bid/7460