CVE-2009-4235

EPSS 0.04%

acpid - weak file permissions

Published: 12/8/2009Modified: 4/28/2026
Also known as:DEBIAN-CVE-2009-4235

Description

acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033.

Affected packages (2)

References (1)