Secunia

Secunia Research has discovered a security issue in Adobe Reader for Unix, which can be exploited by malicious, local users to gain knowledge of sensitive information.

The problem is caused due to temporary files being created with permissions based on the user's umask in the "/tmp" folder under certain circumstances when documents are opened.

Successful exploitation allows an unprivileged user to read arbitrary users' documents.

The security issue has been confirmed in version 5.0.10. The vendor has reported that version 5.0.9 is also affected.

Solution
-- Linux and Solaris Platforms --
Further details available in Customer Area

Provided and/or discovered by
Carsten Eiram, Secunia Research.

Changelog
Further details available in Customer Area

Original Advisory
Adobe:
http://www.adobe.com/support/techdocs/329121.html

Secunia Research:
http://secunia.com/secunia_research/2005-6/

Deep Links
Links available in Customer Area