IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the installation kit obtained through a Notes 8 download and (2) 0777 permissions for the installdata file that is created by setup.sh, which allows local users to gain privileges via a Trojan horse file.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Lotus_notes | Ibm | * | 8.0.1 (including) |