Weak Permission Management in Gnash Plugin Allows Local Information Exposure
CVE-2011-4328
Currently unrated
What is CVE-2011-4328?
The Gnash plugin prior to version 0.8.10 possesses a vulnerability where cookie files are created with weak permissions in the /tmp directory, making them world-readable. This allows local users to access certain sensitive information stored in these cookies. The predictable naming convention of the cookie files exacerbates the issue, as it simplifies the process for attackers to exploit this weakness to extract sensitive data from the system.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.