CVE-2009-4235

Publication date 8 December 2009

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033.

Read the notes from the security team

Status

Package Ubuntu Release Status
acpid 9.10 karmic
Not affected
9.04 jaunty
Not affected
8.10 intrepid
Not affected
8.04 LTS hardy
Not affected
6.06 LTS dapper
Not affected

Notes

kees

per Debian, only logs to syslog.