Lucene search

K
cveNVDCVE-2005-0154
HistoryFeb 02, 2005 - 12:00 a.m.

CVE-2005-0154: newsgrab newsgrab.pl file information disclosure

2005-02-0200:00:00
NVD
web.nvd.nist.gov
22
cve
newsgrab
unix
information disclosure
vulnerability
nvd
usenet
local attacker

6 Medium

AI Score

Confidence

Low

newsgrab is an application running on Unix that is used to download binary encoded messages from USENet. newsgrab versions prior to 0.5.0pre4 could allow a local attacker to obtain information, caused by a vulnerability in the newsgrab.pl file. The newsgrab.pl file sets the permissions in the output directory as world-readable. A local attacker could exploit this vulnerability to view files and obtain sensitive information.

6 Medium

AI Score

Confidence

Low