Description
Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype/lang directory with world-writable permissions, which allows local users to modify language files and possibly conduct social engineering or other attacks.
References
- 20050216 Re: Permission problem in Skype BETA for linux mailing-list
- 20041222 Permission problem in Skype BETA for linux mailing-list
- 12081 vdb-entry
- skype-lang-insecure-permissions(18644) vdb-entry