CVE-2009-4358

CVE-2009-4358 affects FreeBSD 8.0, 7.2, 7.1, 6.4 and 6.3. The issue is insecure permissions in the working directory (/var/db/freebsd-update) used during freebsd-update fetch or upgrade, allowing local users to read copies of sensitive files. No exploitation details are provided here. The vulnera...