CVE-2007-6249

etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often resulting in permissions weaker than those of the original files, which might allow local users to obtain sensitive information by reading the merge file.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*
cpe:2.3:a:gentoo:portage:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:39

Type Values Removed Values Added
References () http://bugs.gentoo.org/show_bug.cgi?id=193589 - Exploit () http://bugs.gentoo.org/show_bug.cgi?id=193589 - Exploit
References () http://osvdb.org/42636 - () http://osvdb.org/42636 -
References () http://secunia.com/advisories/28094 - () http://secunia.com/advisories/28094 -
References () http://sources.gentoo.org/viewcvs.py/portage?rev=7799&view=rev - Exploit () http://sources.gentoo.org/viewcvs.py/portage?rev=7799&view=rev - Exploit
References () http://www.gentoo.org/security/en/glsa/glsa-200712-11.xml - () http://www.gentoo.org/security/en/glsa/glsa-200712-11.xml -
References () http://www.securityfocus.com/bid/26864 - () http://www.securityfocus.com/bid/26864 -
References () http://www.securitytracker.com/id?1019097 - () http://www.securitytracker.com/id?1019097 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/39035 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/39035 -

Information

Published : 2007-12-15 01:46

Updated : 2024-11-21 00:39


NVD link : CVE-2007-6249

Mitre link : CVE-2007-6249

CVE.ORG link : CVE-2007-6249


JSON object : View

Products Affected

gentoo

  • linux
  • portage
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor