COMMAND

    FlagShip

SYSTEMS AFFECTED

    FlagShip v4.48.7449

PROBLEM

    'Narrow' found following.   FlagShip is a cross-platform  database
    development  system,  fully  compatible  to  Clipper, handles also
    other xBase dialects.  FlagShip is shipped with Red Hat linux  6.0
    Application CD.

    Several binary files  are world writeable.   Anyone could  replace
    them  with  a  trojan  and  trick  someone to execute the trojaned
    binary files.  The binary files:

        /usr/bin/FSserial
        /usr/bin/FlagShip_c
        /usr/bin/FlagShip_p

SOLUTION

    Change the premission of the binary files to 755.