CVE-2007-5751

Description

Liferea before 1.4.6 uses weak permissions (0644) for the feedlist.opml backup file, which allows local users to obtain credentials.

Affected Platforms

Weakness Type

CWE-264

References

• http://osvdb.org/40649
• http://secunia.com/advisories/27438
• http://secunia.com/advisories/27491
• http://sourceforge.net/project/shownotes.php?release_id=550468
• http://www.securityfocus.com/bid/26254
• https://bugzilla.redhat.com/show_bug.cgi?id=360641