Arkeia Backup World Writable File Creation Vulnerability

Bugtraq ID:	3085
Class:	Configuration Error
CVE:	CVE-2001-0988
Remote:	No
Local:	Yes
Published:	Jul 23 2001 12:00AM
Updated:	Jul 11 2009 06:56AM
Credit:	This vulnerability was announced to Bugtraq by Daniel Wittenberg <[email protected]> on July 23, 2001.
Vulnerable:	Knox Software Arkeia Server 4.2.8 -2 - Caldera OpenLinux Desktop 2.3 - Caldera OpenLinux Server 3.1 - Debian Linux 2.2 - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.1 - Redhat Linux 7.1 - Redhat Linux 7.0 - Redhat Linux 6.2 - SCO eDesktop 2.4 - SCO eServer 2.3.1 - Slackware Linux 8.0 - Slackware Linux 7.1 - Slackware Linux 7.0 - SuSE Linux 7.2 - SuSE Linux 7.1 - SuSE Linux 7.0 - SuSE Linux 6.4 Knox Software Arkeia 5.3 Knox Software Arkeia 5.2 Knox Software Arkeia 4.2 Knox Software Arkeia 4.1 Knox Software Arkeia 4.0 + SuSE Linux 6.2
Not Vulnerable:	Knox Software Arkeia Server 4.2.7 -1

Arkeia Backup World Writable File Creation Vulnerability

See discussion.

Arkeia Backup World Writable File Creation Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.