UBUNTU-CVE-2013-6412

The transformsave function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors...

CVE-2013-6412

CVE-2013-6412 affects Augeas, specifically the transform_save logic in transform.c for versions 1.0.0 to 1.1.0. The root cause is incorrect calculation of permission values when the umask contains a 7, leading to world-writable new files and enabling local users to modify files via unspecified ve...