Vulnerability Details CVE-2006-1587
NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.6%
CVSS Severity
CVSS v2 Score 2.1
References
- ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-007.txt.asc
- http://secunia.com/advisories/19465
- http://securitytracker.com/id?1015847
- http://www.osvdb.org/24258
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25581
- ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-007.txt.asc
- http://secunia.com/advisories/19465
- http://securitytracker.com/id?1015847
- http://www.osvdb.org/24258
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25581
Products affected by CVE-2006-1587
-
cpe:2.3:o:netbsd:netbsd:1.6
-
cpe:2.3:o:netbsd:netbsd:1.6.1
-
cpe:2.3:o:netbsd:netbsd:1.6.2
-
cpe:2.3:o:netbsd:netbsd:2.0
-
cpe:2.3:o:netbsd:netbsd:2.0.1
-
cpe:2.3:o:netbsd:netbsd:2.0.2
-
cpe:2.3:o:netbsd:netbsd:2.0.3
-
cpe:2.3:o:netbsd:netbsd:2.1
-
cpe:2.3:o:netbsd:netbsd:3.0