Description
NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file.
References
- 19465 third-party-advisory
- 1015847 vdb-entry
- 24258 vdb-entry
- bsd-mailrc-insecure-permissions(25581) vdb-entry