A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.