Stani's Python Editor insecure default file license Vulnerability

Information provision:	Provide hotline: 51cto.editor@gmail.com
Vulnerability category:	Design Vulnerabilities
Attack type:	Local attacks
Release date:	2005-10-17
Updated on:	2005-10-17
Affected Systems:	Stani's Python Editor (SPE) 0.x
Security system:	None
Vulnerability Reporter:	Bryan Ostergaard
Vulnerability description:	Secunia Advisory: sa17ory Stani's Python Editor unsafe default file license Bryan Ostergaard has reported a security issue in Stani's Python Editor (SPE). malicious local attackers may use extended security privileges in vulnerable systems to perform certain operations. This security issue occurs because the files belonging to the SPE are installed with the world-writable license. Attackers can exploit this vulnerability to modify the Python script of the SPE, which may contain malicious content. Security issues in Stani's Python Editor (SPE) 0.7.5.c have been reported. Other versions may also be affected.
Test method:	None
Solution:	Remove the world-writable license from the affected file.