Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2010-2241

Опубликовано: 18 мая 2010
Источник: redhat
CVSS2: 4.6

Описание

The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts.

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=608032redhat-ds: setup script insecure .inf file permissions

4.6 Medium

CVSS2

Связанные уязвимости

nvd
больше 15 лет назад

The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts.

github
больше 3 лет назад

The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts.

4.6 Medium

CVSS2