CVE-2009-4235

Priority
Medium
Description
acpid 1.0.4 sets an unrestrictive umask, which might allow local users to
leverage weak permissions on /var/log/acpid, and obtain sensitive
information by reading this file or cause a denial of service by
overwriting this file, a different vulnerability than CVE-2009-4033.
References
Notes
 kees> per Debian, only logs to syslog.
Package
Source: acpid (LP Ubuntu Debian)
Upstream:needed
More Information

Valid XHTML 1.0 Strict

Updated: 2015-07-29 20:37:15 UTC (commit 9756)