Unscored CVE-2014-3851 EUVD-2014-3788GHSA-g2jg-c284-pf5h

usr/lib/cgi-bin/create_passwd_file.py in Pyplate 0.08 uses world-readable permissions for passwd.db, which allows local users to obtain the…

Published Aug 7, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

usr/lib/cgi-bin/create_passwd_file.py in Pyplate 0.08 uses world-readable permissions for passwd.db, which allows local users to obtain the administrator password by reading this file.

References

[oss-security] 20140523 Re: CVE request: Pyplate multiple vulnerabilities mailing-list
[oss-security] 20140514 CVE request: Pyplate multiple vulnerabilities mailing-list