Hack Forums
[2/5] Avaya Products Shadow "useradd.c" Insecure Mailbox File Permissions - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: [2/5] Avaya Products Shadow "useradd.c" Insecure Mailbox File Permissions (/showthread.php?tid=888)



[2/5] Avaya Products Shadow "useradd.c" Insecure Mailbox File Permissions - Omniscient - Jun 29, 2007

Avaya has acknowledged a security issue in various Avaya products, which potentially can be exploited by malicious, local users to perform certain actions with escalated privileges.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
Detects insecure versions of applications installed
Verifies that all Microsoft patches are applied
Assists you in updating your system and applications
Runs through your browser. No installation or download is required.

Posted at http://secunia.com/advisories/25896/


* - hellrockinworlds - Feb 25, 2011

Detects insecure versions of applications installed :- Top antivirus does so. Like AVG 2011 {purchased one} does so.

Verifies that all microsoft patches are applied :- do we really need this if we update our security updates directly from microsoft, {Just anxious to learn how "secunia" differs from microsoft security update works}
Assists you in updating your system and applications :- Well why one need other application for update process, when applications are integrated itself with this feature.

Runs through your browser. No installation or download is required :- Good feature but what is java is not installed in system or browser, do they provide alternative method too.