CVE-2012-4442

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root
account during operations with a non-root effective UID, which might allow
local users to bypass intended file-read restrictions by leveraging a race
condition in a file-permission check.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688007&gt;