medium4.3
CVE-2020-26932
debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, whereas the intended permissions are mode …
Impact
debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, whereas the intended permissions are mode 4750 (for access by the sympa group)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sympa | Sympa | before 6.2.40 |
| Debian | Debian Linux | Version 10.0 |