CVE-2005-2214

apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2005-07-11

Last modified

2024-08-07

Affected products

• Apt-setup (Debian)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=305142
• http://secunia.com/advisories/15955
• http://www.securityfocus.com/bid/14173