CVE-2006-0071: Gentoo App-Crypt Pinentry

Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0.

Affected products

  • Gentoo App-Crypt Pinentry: version 0.7.2 only
  • Gentoo Linux: any version

Published 2006-01-04. Last modified 2026-06-16.