newsgrab is an application running on Unix that is used to download binary encoded messages from USENet. newsgrab versions prior to 0.5.0pre4 could allow a local attacker to obtain information, caused by a vulnerability in the newsgrab.pl file. The newsgrab.pl file sets the permissions in the output directory as world-readable. A local attacker could exploit this vulnerability to view files and obtain sensitive information.