Description
ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows users to modify log records and possibly execute arbitrary code.
References
- http://www.kb.cert.org/vuls/id/CRDY-5EXQT9
- VU#813737 third-party-advisory
- scriptlogic-logs$-insecure-permissions(11922) vdb-entry
- 7476 vdb-entry