Vulnerability in Freenet6

CVE-2004-0563

The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions, which could allow local users to gain sensitive information, such as a username and password.

EPSS: 0.004 (32.3th percentile) — read the EPSS interpretation.

Affected products

  • Freenet6 — versions 0.9.6, 1.0
  • N/a — versions n/a

References