PT-2004-1665 · Freenet6 · Freenet6
CVE-2004-0563
·
Publicado
2004-11-19
·
Atualizado
2017-07-11
CVSS v2.0
2.1
Baixa
| Vetor | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
freenet6 versions prior to 0.9.6
freenet6 versions prior to 1.0
Description
The issue concerns the tspc.conf configuration file having world-readable permissions, which could allow local users to obtain sensitive information, including usernames and passwords.
Recommendations
For versions prior to 0.9.6, update to version 0.9.6 or later to resolve the issue.
For versions prior to 1.0, update to version 1.0 or later to resolve the issue.
As a temporary workaround, consider changing the permissions of the tspc.conf configuration file to restrict access until a patch is applied.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Freenet6