CVE-2001-0416

sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed by sgml-tools.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2001-06-27

Last modified

2024-08-08

Affected products

• Sgml-tools (Debian)
• Immunix (Immunix)
• Mandrake Linux (Mandrakesoft)

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000390
• http://marc.info/?l=bugtraq&m=98477491130367&w=2
• http://www.debian.org/security/2001/dsa-038
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-030.php3
• http://www.novell.com/linux/security/advisories/2001_016_sgmltool_txt.html
• http://www.redhat.com/support/errata/RHSA-2001-027.html
• http://www.securityfocus.com/bid/2506
• http://www.securityfocus.com/bid/2683
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6201