NVD

Id
58250  
Name
CVE-2007-6249  
Description
etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often resulting in permissions weaker than those of the original files, which might allow local users to obtain sensitive information by reading the merge file.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-12-14  
Modified Date
2008-11-15  
Seq
2007-6249  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
298628 58250 CVE-2007-6249 http://bugs.gentoo.org/show_bug.cgi?id=193589  View
298629 58250 CVE-2007-6249 http://sources.gentoo.org/viewcvs.py/portage?rev=7799&view=rev  View
298630 58250 CVE-2007-6249 GLSA-200712-11  View
298631 58250 CVE-2007-6249 26864  View
298632 58250 CVE-2007-6249 1019097  View
298633 58250 CVE-2007-6249 portage-etcupdate-information-disclosure(39035)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54263 JVNDB-2007-002955 Portage の etc-update における重要な情報を取得される脆弱性 Portage の etc-update は、umask に依存してマージファイルのパーミッションを設定するため、元ファイルのパーミッションよりも弱くなり、重要な情報を取得される脆弱性が存在します。 CVE-2007-6249 29604 CVE-2007-6249 58250 2.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002955.html 2007-12-13 2012-06-26 View