PT-2006-3672 · Ximian+2 · Redcarpet+2

Publicado 2006-06-01 · Atualizado 2018-10-18 · CVE-2006-2752

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Novell Linux Desktop version 9 SUSE SLES version 9

Description The issue concerns the RedCarpet /etc/ximian/rcd.conf configuration file, which has world-readable permissions. This allows attackers to obtain the rc (RedCarpet) password.

Recommendations For Novell Linux Desktop version 9, restrict access to the /etc/ximian/rcd.conf file to prevent unauthorized reading of the rc password. For SUSE SLES version 9, change the permissions of the /etc/ximian/rcd.conf file to prevent world-readable access.

Correção

Identificadores relacionados

CVE-2006-2752

Produtos afetados

Novell Linux Desktop

Redcarpet

Suse Sles

Referências · 3

• http://secunia.com/advisories/20396 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2752 · Nota de Segurança
• http://securityfocus.com/archive/1/435491/100/0/threaded · Aviso do Fabricante