Details
If the root search path contains a world-writable directory, malicious software could be placed in the path by intruders and/or malicious users and inadvertently run by root with all of root’s privileges.
Solution
For each world-writable path in root’s executable search path, perform one of the following.
Remove the world-writable permission on the directory.
Run command: -OR- The following resource is also helpful. This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.
# chmod o-w
Remove the world-writable directory from the executable search path. Identify and edit the initialization file referencing the world-writable directory and remove it from the PATH variable.Supportive Information
References
Source