Detections
Analytics
CVE-2009-5054
critical
Description
Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations.
References
http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt