CVE-2004-1778

Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype/lang directory with world-writable permissions, which allows local users to modify language files and possibly conduct social engineering or other attacks.

• CWE-276

• http://marc.info/?l=bugtraq&m=110374568916303&w=2Issue Tracking, Mailing List, Third Party Advisory
• http://marc.info/?l=bugtraq&m=110868557905786&w=2Issue Tracking, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/12081Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18644Third Party Advisory, VDB Entry
• http://marc.info/?l=bugtraq&m=110374568916303&w=2Issue Tracking, Mailing List, Third Party Advisory
• http://marc.info/?l=bugtraq&m=110868557905786&w=2Issue Tracking, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/12081Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18644Third Party Advisory, VDB Entry

Published

Dec 22, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1772Stack-based buffer overflow in shar in GNU sharutils 4.2.1 a…
• CVE-2004-1773Multiple buffer overflows in sharutils 4.2.1 and earlier may…
• CVE-2004-1774Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 pa…
• CVE-2004-1775Cisco VACM (View-based Access Control MIB) for Catalyst Oper…
• CVE-2004-1776Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to re…
• CVE-2004-1777A "range check error" in Skype for Windows before 0.98.0.28 …
• CVE-2004-1779Cross-site scripting (XSS) vulnerability in board.php for Th…
• CVE-2004-1780Info Touch Surfnet kiosk allows local users to deposit extra…
• CVE-2004-1781Info Touch Surfnet kiosk allows local users to crash Surfnet…
• CVE-2004-1782athenareg.php in Athena Web Registration allows remote attac…
• CVE-2004-1783Directory traversal vulnerability in Net2Soft Flash FTP Serv…
• CVE-2004-1784Buffer overflow in the web server of Webcam Watchdog 3.63 al…