PT-2004-1665 · Freenet6 · Freenet6

Published 2004-11-19 · Updated 2017-07-11 · CVE-2004-0563

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions freenet6 versions prior to 0.9.6 freenet6 versions prior to 1.0

Description The issue concerns the tspc.conf configuration file having world-readable permissions, which could allow local users to obtain sensitive information, including usernames and passwords.

Recommendations For versions prior to 0.9.6, update to version 0.9.6 or later to resolve the issue. For versions prior to 1.0, update to version 1.0 or later to resolve the issue. As a temporary workaround, consider changing the permissions of the tspc.conf configuration file to restrict access until a patch is applied.

Fix

Related Identifiers

CVE-2004-0563

DSA-555-1

Affected Products

Freenet6

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-0563 · Security Note
• http://securityfocus.com/bid/11280 · Vendor Advisory
• http://debian.org/security/2004/dsa-555 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17544 · Note
• http://secunia.com/advisories/12705 · Note
• http://securitytracker.com/id?1011460 · Note