Launchpad.net

CVE 2005-2214

apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.

See the CVE page on Mitre.org for more details.

References