Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2010-2241

Опубликовано: 18 мая 2010
Источник: redhat
CVSS2: 4.6
EPSS Низкий

Описание

The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts.

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=608032redhat-ds: setup script insecure .inf file permissions

EPSS

Процентиль: 28%
0.00348
Низкий

4.6 Medium

CVSS2

Связанные уязвимости

nvd
почти 16 лет назад

The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts.

github
около 4 лет назад

The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts.

EPSS

Процентиль: 28%
0.00348
Низкий

4.6 Medium

CVSS2