Description
The keystore file in Unicore Client before 5.6 build 5, when running on Unix systems, has insecure default permissions, which allows local users to obtain sensitive information.
References
- 22765 third-party-advisory
- 20981 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=461942
- unicore-keystore-information-disclosure(30157) vdb-entry
- ADV-2006-4419 vdb-entry