Description
Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages.
References
- 20040412 Citadel/UX 6.20 fixes local permissions vulnerability mailing-list
- citadel-database-insecure-permissions(15850) vdb-entry
- 10102 vdb-entry