Lucene search

K
freebsdFreeBSDCD7E260A-6BFF-11D9-A5DF-00065BE4B5B6
HistoryJan 18, 2005 - 12:00 a.m.

newsgrab -- insecure file and directory creation

2005-01-1800:00:00
vuxml.freebsd.org
10

The newsgrab script uses insecure permissions during the
creation of the local output directory and downloaded files.
After a file is created, permissions on it are set using the mode
value of the newsgroup posting. This can potentially be a problem
when the mode is not restrictive enough. In addition, the output
directory is created with world writable permissions allowing other
users to drop symlinks or other files at that location.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchnewsgrab<= 0.4.0UNKNOWN
Related for CD7E260A-6BFF-11D9-A5DF-00065BE4B5B6