apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2215
http://www.securityfocus.com/bid/14173