CVE-2005-0118: helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissi...

Security readout for executives and security teams

This is an old local information-disclosure issue in helvis. When recovery files are created, they can be stored where other local users can read them. The business risk is exposure of text being edited, such as credentials, notes, or configuration snippets, on shared systems. Exposure is most plausible on shared Unix-like systems running helvis 1.8h2_1 or earlier. Single-user systems have lower practical risk. The source bundle does not provide formal CPEs or a complete affected-platform list. Treat as low priority unless helvis is present on shared systems handling sensitive files. It is local-only based on available evidence, but confidentiality impact can matter where multiple users share hosts. Mitigation focus: Check vendor or OS package guidance for fixed helvis versions.; Upgrade or remove helvis where it is installed and unused.; Restrict multi-user access on systems where helvis remains present..

Prepared

Jun 30, 2026, 01:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.