CVE-2006-1587
NetBSD 1.6-3.0 - Unprotected User Data Exposure via .mailrc Record File
Title source: llmDescription
NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file.
References (5)
Core 5
Core References
Vendor Advisory vendor-advisory
x_refsource_netbsd
ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-007.txt.asc
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/19465
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1015847
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/24258
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25581
Scores
EPSS
0.0006
EPSS Percentile
18.3%
Details
Status
published
Products (9)
netbsd/netbsd
1.6 (2 CPE variants)
netbsd/netbsd
1.6.1
netbsd/netbsd
1.6.2
netbsd/netbsd
2.0
netbsd/netbsd
2.0.1
netbsd/netbsd
2.0.2
netbsd/netbsd
2.0.3
netbsd/netbsd
2.1
netbsd/netbsd
3.0
Published
Apr 03, 2006
Tracked Since
Feb 18, 2026