PT-2007-7155 · Red Hat+1 · Fedora+2

Publicado 2007-12-18 · Atualizado 2022-02-25 · CVE-2007-6283

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux versions 5 Fedora (affected versions not specified)

Description The issue allows local users to perform unauthorized named commands due to the Bind /etc/rndc.key file having world-readable permissions. This can lead to a denial of service by stopping named.

Recommendations For Red Hat Enterprise Linux version 5, change the permissions of the /etc/rndc.key file to prevent world-readable access. For Fedora, change the permissions of the /etc/rndc.key file to prevent world-readable access.

Correção

DoS

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2007-6283

RHSA-2008:0300

RHSA-2008_0300

Produtos afetados

Bind

Fedora

Red Hat

Referências · 11

• http://secunia.com/advisories/28180 · Nota
• https://access.redhat.com/errata/RHSA-2008:0300 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6283 · Nota de Segurança
• https://redhat.com/archives/fedora-package-announce/2007-December/msg00671.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2007-6283 · Nota
• https://redhat.com/archives/fedora-package-announce/2007-December/msg00587.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2008-0300.html · Aviso do Fabricante
• http://secunia.com/advisories/30313 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-6283 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2008-0122 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9977 · Nota