CVE-2002-0377: Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, wh...

Security readout for executives and security teams

This is an old local information-disclosure issue in Gaim 0.57. On shared systems, the client could leave MSN web email authentication information in temporary files with unsafe permissions, letting another local user access someone else's web email account. Exposure is most plausible on legacy Unix/Linux systems where Gaim 0.57 is installed and multiple local users share the same host. Modern environments are unlikely to be affected unless this obsolete client remains in use. Treat this as a legacy exposure cleanup item unless Gaim 0.57 is still present on shared systems. If found, prioritize removal because the issue can expose email authentication data. Mitigation focus: Remove Gaim 0.57 from managed systems where possible.; Check vendor guidance or changelog before choosing any replacement version.; Restrict use of legacy messaging clients on shared multi-user hosts..

Prepared

Jun 30, 2026, 13:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.