Description
readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files.
References
- 5680 vdb-entry
- bsd-readline-permissions(6586) vdb-entry