CVE-2007-6283
Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.
- Score
- CVSS 2.0 4.9 Medium
- Status
- Modified - secalert@redhat.com
- Published
- 2007-12-18
- Last modified
- 2024-08-07
- Weaknesses
- CWE-200
Affected products
- Centos (Centos)
- Fedora Core (Fedoraproject)
- Linux (Oracle)
- Enterprise Linux (Redhat)
- Enterprise Linux Desktop (Redhat)
- Enterprise Linux For Ibm Z Systems (Redhat)
- Enterprise Linux For Power Big Endian (Redhat)
- Enterprise Linux Server (Redhat)
- Enterprise Linux Workstation (Redhat)
References
- http://secunia.com/advisories/28180
- http://secunia.com/advisories/30313
- http://www.redhat.com/support/errata/RHSA-2008-0300.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-6283
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9977
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00587.html
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00671.html
