2005-08-16 04:00:00
mitre
PUBLISHED
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files.