Andreas Beckmann

**Name of the Vulnerable Software and Affected Versions** phpBB3 versions prior to 3.0.11-4 **Description** The issue allows local users to modify cache file contents due to world-writable permissions. **Recommendations** For versions prior to 3.0.11-4, update to version 3.0.11-4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Open vSwitch version 1.4.2 **Description** The issue allows local users to delete and overwrite arbitrary files due to world-writable permissions for certain directories. Specifically, the directories `/var/lib/openvswitch/pki/controllerca/incoming/` and `/var/lib/openvswitch/pki/switchca/incoming/` have insecure permissions. **Recommendations** For Open vSwitch version 1.4.2, consider changing the permissions of the `/var/lib/openvswitch/pki/controllerca/incoming/` and `/var/lib/openvswitch/pki/switchca/incoming/` directories to prevent world-writable access, thereby restricting the ability of local users to delete or overwrite files in these directories.

**Name of the Vulnerable Software and Affected Versions** logol version 1.5.0 **Description** The issue allows local users to delete or overwrite arbitrary files due to world writable permissions for the /var/lib/logol/results directory. **Recommendations** For logol version 1.5.0, consider changing the permissions of the /var/lib/logol/results directory to prevent world writability as a temporary workaround until a patch is available. Restrict access to the /var/lib/logol/results directory to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** eXtplorer version 2.1.0b6 **Description** The issue concerns the use of world-writable permissions for the /var/lib/extplorer/ftp tmp directory. This setup allows local users to delete or overwrite arbitrary files. **Recommendations** For version 2.1.0b6, change the permissions of the /var/lib/extplorer/ftp tmp directory to prevent world-writable access, restricting write permissions to only the necessary users or groups.