EUVD-2001-0067

Malware in sbrugna...

CVE-2001-0067

The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set...

CVE-2001-0067

CVE-2001-0067 concerns the jpilot program, which creates a .jpilot directory in the user’s home with world-writable permissions (777). This insecure default enables local attackers to read other users’ PalmOS backups if umasks are not strictly set. Root cause is directory creation with permissive...

CVE-2001-0067

The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set...