CVE-2012-2389

hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might allow local users to obtain sensitive information such as credentials.

Date published : 2012-06-21

http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081983.html

http://www.mandriva.com/security/advisories?name=MDVSA-2012:168