Incorrect Default Permissions

CVE-2012-4434

Medium

6.5/10

fwknop before 2.0.3 allow remote authenticated users to cause a denial of service (server crash) or possibly execute arbitrary code.

During installation, installed file permissions are set to allow anyone to modify those files.