{"id":"CVE-2011-1500","details":"PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user's home directory, which allows local users to obtain Pandora credentials by reading this file.","modified":"2026-04-10T03:41:44.619009Z","published":"2011-04-13T14:55:01Z","references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/44059"},{"type":"WEB","url":"http://openwall.com/lists/oss-security/2011/04/08/2"},{"type":"WEB","url":"http://openwall.com/lists/oss-security/2011/04/08/4"},{"type":"WEB","url":"http://www.securityfocus.com/bid/47300"},{"type":"WEB","url":"https://bugs.launchpad.net/pithos/+bug/733307"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/66661"}],"schema_version":"1.7.5"}