CVE:CVE-2006-0071
CNNVD:CNNVD-200601-013
pinentry是使用Assuan协议的简单PIN或passphrase项对话的集合。
pinentry ebuild在安装时没有正确的设置pinentry二进制程序的权限，允许设置sgid位以组ID 0的权限执行，导致以组ID 0的权限读写文件。
solution:Upgrade gentoo app-crypt_pinentry to a higher version than 0.7.2,0.7.2:r1,and avoid the version 0.7.2,0.7.2:r1; Upgrade gentoo linux to a higher version than *