MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files.
CVSS 2.0
Severity: LOW
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| mtools | mformat | 3.9.8 |
| mtools | mformat | 3.9.6 |
| mtools | mformat | 3.9.5 |
| mtools | mformat | 3.9.7 |
| mtools | mformat | 3.9.9 |
| mtools | mformat | 3.9.4 |
| mtools | mformat | 3.9.1 |
| mtools | mformat | 3.9.2 |
| mtools | mformat | 3.9.3 |