Vulnerability in Rob Flynn Gaim
CVE-2002-0377
Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows local users to access MSN web email accounts of other users who run Gaim by reading authentication information from the files.
EPSS: 0.004 (29.0th percentile) — read the EPSS interpretation.
Affected products
- Rob_flynn Gaim — versions 0.57
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_VULN-DEV)
- cve@mitre.org (vdb-entry, x_refsource_XF)