CVE-2009-4235

Priority
Medium
Description
acpid 1.0.4 sets an unrestrictive umask, which might allow local users to
leverage weak permissions on /var/log/acpid, and obtain sensitive
information by reading this file or cause a denial of service by
overwriting this file, a different vulnerability than CVE-2009-4033.
References
Notes
kees> per Debian, only logs to syslog.
Package
Source: acpid (LP Ubuntu Debian)
Upstream:needed
Ubuntu 8.04 LTS (Hardy Heron):not-affected
Ubuntu 10.04 LTS (Lucid Lynx):not-affected
More Information

Valid XHTML 1.0 Strict

Updated: 2012-06-01 15:20:25 UTC (commit 5347)