Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the executables to gain privileges.
During installation, installed file permissions are set to allow anyone to modify those files.
Link | Tags |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2002-10/0260.html | mailing list broken link |
http://www.iss.net/security_center/static/10398.php | vdb entry broken link |
http://www.securityfocus.com/bid/6003 | vdb entry third party advisory broken link |