CVE-2009-5054 Information

Description

Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files which might allow attackers to bypass intended access restrictions via standard filesystem operations.

Reference

http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt