CVE-2007-6249
Published Dec 15, 2007
Last updated 7 years ago
Overview
- Description
- etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often resulting in permissions weaker than those of the original files, which might allow local users to obtain sensitive information by reading the merge file.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 2.1
- Impact score
- 2.9
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "647BA336-5538-4972-9271-383A0EC9378E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gentoo:portage:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0464455F-56EB-4349-B9E5-0B3B2941EC86",
"versionEndIncluding": "2.1.3.10"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]