Description
Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows local users to access MSN web email accounts of other users who run Gaim by reading authentication information from the files.
References
- 20020512 Gaim abritary Email Reading mailing-list
- 4730 vdb-entry
- http://gaim.sourceforge.net/ChangeLog
- 20020511 Gaim abritary Email Reading mailing-list
- gaim-email-access(9061) vdb-entry