readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Openbsd | Openbsd | * | 2.8 (including) |