Description
xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive information such as login credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
References
- 21686 third-party-advisory
- 28278 vdb-entry
- ADV-2006-3417 vdb-entry
- 19762 vdb-entry
- xbiff2-homexbiff2rc-info-disclosure(28680) vdb-entry