Description
yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allows local users to read arbitrary files.
References
- 17242 third-party-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334616
- 15140 vdb-entry
- 20074 vdb-entry