Unrated severityNVD Advisory· Published Dec 8, 2009· Updated Jun 16, 2026

CVE-2009-4235

Description

acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tedfelix/Acpid2 versions
cpe:2.3:a:tim_hockin:acpid:1.0.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tim_hockin:acpid:1.0.4:*:*:*:*:*:*:*
- (no CPE)range: = 1.0.4

Patches

Vulnerability mechanics

References

www.redhat.com/support/errata/RHSA-2009-1642.htmlnvdPatch
securitytracker.com/idnvd
www.debian.org/security/2009/dsa-1960nvd
www.mandriva.com/security/advisoriesnvd
www.mandriva.com/security/advisoriesnvd
bugzilla.redhat.com/show_bug.cginvd
bugzilla.redhat.com/show_bug.cginvd
exchange.xforce.ibmcloud.com/vulnerabilities/54676nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000