Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-4036

Опубликовано: 18 апр. 2016
Источник: debian

Описание

The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses weak permissions for /etc/quagga, which allows local users to obtain sensitive information by reading files in the directory.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
quaggafixed1.0.20160315-2package

Примечания

  • https://bugzilla.suse.com/show_bug.cgi?id=770619

  • World readable files in /etc/quagga as well in Debian

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 10 лет назад

The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses weak permissions for /etc/quagga, which allows local users to obtain sensitive information by reading files in the directory.

CVSS3: 3.3
redhat
больше 9 лет назад

The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses weak permissions for /etc/quagga, which allows local users to obtain sensitive information by reading files in the directory.

CVSS3: 5.5
nvd
почти 10 лет назад

The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses weak permissions for /etc/quagga, which allows local users to obtain sensitive information by reading files in the directory.

CVSS3: 5.5
github
больше 3 лет назад

The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses weak permissions for /etc/quagga, which allows local users to obtain sensitive information by reading files in the directory.

fstec
почти 10 лет назад

Уязвимость операционных систем OpenSUSE Leap, openSUSE, позволяющая нарушителю получить конфиденциальную информацию