NetSight
IP …
low3.6

CVE-2013-5364

Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when running on Red Hat Linux, uses world-readable and world-writa…

Impact

Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when running on Red Hat Linux, uses world-readable and world-writable permissions for /etc/csia_config.xml, which allows local users to change CSI Agent configuration by modifying this file.

Affected products

VendorProductAffected versions
SecuniaCsi Agent
from 6.0.0 through 6.0.0.15017
from 6.0.1 through 6.0.1.1007
from 7.0.0 through 7.0.0.21

Weakness classification

CWE-264

References