CVE-2008-6756

ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file...

CVE-2008-6756

CVE-2008-6756 – Normal mode : ZoneMinder 1.23.3 on Gentoo Linux stores /etc/zm.conf with 0644 permissions, allowing any local user to read the file and exfiltrate the database username and password. The impact is a local confidentiality exposure of DB credentials. No remediation details are provi...