Lucene search

K
osvGoogleOSV:DSA-555-1
HistorySep 30, 2004 - 12:00 a.m.

freenet6 - file permissions

2004-09-3000:00:00
Google
osv.dev
6

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

Simon Josefsson noticed that the tspc.conf configuration file in
freenet6, a client to configure an IPv6 tunnel to freenet6.net, is set
world readable. This file can contain the username and the password
used to contact the IPv6 tunnelbroker freenet6.net.

For the stable distribution (woody) this problem has been fixed in
version 0.9.6-1woody2.

For the unstable distribution (sid) this problem has been fixed in
version 1.0-2.2.

We recommend that you upgrade your freenet6 package.

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N