CVE-2007-6249

etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often resulting in permissions weaker than those of the original files, which might allow local users to obtain sensitive information by reading the merge file.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*
cpe:2.3:a:gentoo:portage:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-12-15 01:46

Updated : 2024-02-28 11:01


NVD link : CVE-2007-6249

Mitre link : CVE-2007-6249

CVE.ORG link : CVE-2007-6249


JSON object : View

Products Affected

gentoo

  • linux
  • portage
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor