PT-2004-1665 · Freenet6 · Freenet6

Publicado 2004-11-19 · Atualizado 2017-07-11 · CVE-2004-0563

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions freenet6 versions prior to 0.9.6 freenet6 versions prior to 1.0

Description The issue concerns the tspc.conf configuration file having world-readable permissions, which could allow local users to obtain sensitive information, including usernames and passwords.

Recommendations For versions prior to 0.9.6, update to version 0.9.6 or later to resolve the issue. For versions prior to 1.0, update to version 1.0 or later to resolve the issue. As a temporary workaround, consider changing the permissions of the tspc.conf configuration file to restrict access until a patch is applied.

Correção

Identificadores relacionados

CVE-2004-0563

DSA-555-1

Produtos afetados

Freenet6

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/17544 · Nota
• http://secunia.com/advisories/12705 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0563 · Nota de Segurança
• http://securityfocus.com/bid/11280 · Aviso do Fabricante
• http://debian.org/security/2004/dsa-555 · Aviso do Fabricante
• http://securitytracker.com/id?1011460 · Nota