Bugsalert.com
Security News about Viruses, Spyware,
Trojans, Malware, XSS attacks.

CVE-2007-6249 (Portage)

BugsAlert Home > CVE-2007-6249 (Portage)
 
 

etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often resulting in permissions weaker than those of the original files, which might allow local users to obtain sensitive information by reading the merge file.




Original Source: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-6249

Learn more about CVE-2007-6249 (Portage)
 
Tags: cve-2007-6249 portage

Related Items

      PHP 5.2.5 cURL safe_mode bypass

      SuSE: bind (SUSE-SA:2008:033)

      Apple iPhone 1.1.3 remote DoS exploit

      FrSIRT - Redhat Security Update Fixes Seamonkey Code Execution Vulnerabilities

      Mandriva: Updated Qt4 packages fix vulnerability in

      Mandriva: Updated kdegraphics packages fix vulnerabilities

      Web 2.0, DNS Flaws Revealed at Black Hat

 

Pixel