PT-2001-2025 · Red Hat · Red Hat

Publicado 2001-12-06 · Atualizado 2017-10-10 · CVE-2001-0859

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Linux 7.1 kernel versions 2.4.3-12

Description The issue concerns the default umask setting for init in the Red Hat Linux 7.1 Korean installation program, which is set to 000. This results in the installation of files with world-writeable permissions.

Recommendations For kernel version 2.4.3-12, consider changing the default umask setting for init to a more secure value to prevent the installation of files with world-writeable permissions.

Correção

Identificadores relacionados

CVE-2001-0859

Produtos afetados

Red Hat

Referências · 5

• http://online.securityfocus.com/advisories/3725 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2001-148.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0859 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7549 · Nota
• http://securityfocus.com/bid/3527 · Nota