CVE-2013-6889

GNU Rush 1.7 is affected by a privilege handling flaw in which the process fails to drop privileges, allowing local users to read arbitrary files through the --lint option. The vulnerability stems from improper privilege separation in the affected binary, enabling a local attacker to access sensi...