CVE-2009-4235

Priority
Medium
Description
acpid 1.0.4 sets an unrestrictive umask, which might allow local users to
leverage weak permissions on /var/log/acpid, and obtain sensitive
information by reading this file or cause a denial of service by
overwriting this file, a different vulnerability than CVE-2009-4033.
References
Notes
 kees> per Debian, only logs to syslog.
Package
Source: acpid (LP Ubuntu Debian)
Upstream:needed
More Information

Valid XHTML 1.0 Strict

Updated: 2016-01-26 17:34:53 UTC (commit 10507)