## Description

tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### iain_lea - tin

Affected Versions:

- 1.40

## References

- http://marc.info/?l=bugtraq&m=94286179032648&w=2
- http://marc.info/?l=bugtraq&m=94286179032648&w=2

Neural Processor Active