Description
IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the installation kit obtained through a Notes 8 download and (2) 0777 permissions for the installdata file that is created by setup.sh, which allows local users to gain privileges via a Trojan horse file.
References
- 40933 vdb-entry
- ADV-2007-4037 vdb-entry
- 1019009 vdb-entry
- 40934 vdb-entry
- 27860 third-party-advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21289273