Description
Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for ipn/logs/ipn_success.txt, which allows local users to view sensitive information (payment data), and (2) world-writable permissions for ipn/logs, which allows local users to delete or replace payment data.
References
- 22379 vdb-entry
- http://www.uinc.ru/articles/vuln/ptpaypal050.shtml
- 18444 third-party-advisory
- ADV-2006-0183 vdb-entry
- 16218 vdb-entry
- 20060112 Multiple PHP Toolkit for PayPal Vulnerabilities mailing-list