Worker Filemanager 1.0 through 2.7 sets the permissions on the destination directory to world-readable and executable while copying data, which could allow local users to obtain sensitive information.Referenceshttp://www.boomerangsworld.de/worker/wchanges.php3?lang=enhttp://www.securityfocus.com/bid/7460
