CVE-2005-0119

helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid program.

CVE-2005-0118

helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to read the recovered files of other users.