CVE-2004-2778: Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, wh...

Security readout for executives and security teams

This issue concerns Gentoo package build scripts creating different file or directory permissions depending on install order. On affected Gentoo systems, a local user could gain access to restricted paths or run restricted commands. The public bundle does not identify exact affected versions, a CVSS score, or confirmed exploitation. Exposure is most plausible on Gentoo systems using affected ebuilds or package combinations. The bundle lists no precise product CPEs, versions, or package names, so teams must confirm against Gentoo bug references and local permission state. Prioritize as a configuration and local-access risk for Gentoo environments, especially shared servers. The absence of severity scoring and affected versions lowers confidence, but permission drift can undermine access controls and should be checked during Linux fleet hygiene. Mitigation focus: Check Gentoo bug guidance for corrected packages, ebuilds, or official remediation.; Audit sensitive directory and command permissions on Gentoo hosts.; Limit local shell access on shared Gentoo systems..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.