CVE-2011-1500: PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.in...

Security readout for executives and security teams

CVE-2011-1500 is a local information disclosure issue in Pithos 0.3.7. The application stored Pandora credentials in a user configuration file without properly restricting file permissions, allowing another local user on the same system to read them. Exposure is most likely on legacy Linux desktops or shared systems running Pithos 0.3.7 with the affected configuration file present. Single-user systems have lower practical risk, while multi-user hosts increase credential exposure risk. Treat this as a low-priority legacy credential exposure issue unless Pithos 0.3.7 exists on shared systems. The business action is targeted cleanup: identify installations, protect or remove stored credentials, and rotate exposed accounts. Mitigation focus: Inventory systems for Pithos 0.3.7 installations.; Check vendor or distribution guidance for a fixed package.; Restrict pithos.ini permissions to the owning user only..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.