Unscored CVE-2001-0067 EUVD-2001-0067GHSA-9xf3-j46h-rvq4

The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' Pal…

Published Feb 2, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set.

References

jpilot-perms(5762) vdb-entry
20001214 J-Pilot Permissions Vulnerability mailing-list
MDKSA-2000:081 vendor-advisory