IBM Sterling Connect:Direct for Unix Information Disclosure Vulnerability

IBM Sterling Connect:Direct for Unix is peer-to-peer file transfer software. An information disclosure vulnerability exists in IBM Sterling Connect:Direct for Unix version 4.1.0 prior to 4.1.0.4, iFix073, and version 4.2.0 prior to 4.2.0.4, iFix003, which could allow a local user to obtain...

CVE-2016-0380

IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain sensitive information via standard filesystem operations...