Lucene search
HistoryApr 03, 2006 - 10:04 a.m.
CVE-2006-1587
netbsd
.mailrc
record file
cve-2006-1587
permissions
umask
nvd
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
NetBSD 1.6 up to 3.0, when a user has “set record” in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file.
Affected configurations
Node
netbsdnetbsdMatch1.6
ORnetbsdnetbsdMatch1.6beta
ORnetbsdnetbsdMatch1.6.1
ORnetbsdnetbsdMatch1.6.2
ORnetbsdnetbsdMatch2.0
ORnetbsdnetbsdMatch2.0.1
ORnetbsdnetbsdMatch2.0.2
ORnetbsdnetbsdMatch2.0.3
ORnetbsdnetbsdMatch2.1
ORnetbsdnetbsdMatch3.0
Related
nvd
nvd
CVE-2006-1587
2006-04-03 10:04:00
cvelist
cvelist
CVE-2006-1587
2006-04-03 10:00:00
prion
prion
Design/Logic Flaw
2006-04-03 10:04:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2006-1587