The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions, which could allow local users to gain sensitive information, such as a username and password.Referenceshttp://www.debian.org/security/2004/dsa-555http://www.securityfocus.com/bid/11280https://exchange.xforce.ibmcloud.com/vulnerabilities/17544http://secunia.com/advisories/12705/http://securitytracker.com/id?1011460
