CVE-2001-0067

The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2001-02-12

Last modified

2024-08-08

Affected products

• Jpilot (Judd Montgomery)

References

• http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-081.php3
• http://www.securityfocus.com/templates/archive.pike?mid=150957&end=2001-02-03&fromthread=1&start=2001-01-28&threads=0&l…
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5762