medium4.6
CVE-1999-1092
tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.
Impact
tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iain Lea | Tin | Version 1.40 |