CVE-2006-1587

Description

NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file.

Affected Platforms

Weakness Type

NVD-CWE-Other

References

• ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-007.txt.asc
• http://secunia.com/advisories/19465
• http://securitytracker.com/id?1015847
• http://www.osvdb.org/24258
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25581
• ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-007.txt.asc