CVE-2005-2214

Description

apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.

Affected products

• Debian / apt-setup

References

• VENDOR_ADVISORYhttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=305142
• VENDOR_ADVISORYhttp://secunia.com/advisories/15955
• MISChttp://www.securityfocus.com/bid/14173