PT-2012-5409 · Red Hat · Dracut+1

Huzaifa Sidhpurwala · Publicado 2012-10-09 · Atualizado 2024-06-15 · CVE-2012-4453

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions dracut versions in Red Hat Enterprise Linux 6, Fedora 16 and 17

Description The issue allows local users to potentially obtain sensitive information due to world-readable permissions in initramfs images created by dracut.sh.

Recommendations For Red Hat Enterprise Linux 6, consider changing the permissions of initramfs images to prevent world-readable access. For Fedora 16 and 17, restrict access to the initramfs images until a fix is applied.

Correção

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2012-4453

OPENSUSE-SU-2024:10225-1

RHSA-2013:1674

RHSA-2013_1674

Produtos afetados

Red Hat

Dracut

Referências · 21

• https://cve.org/CVERecord?id=CVE-2012-4453 · Nota de Segurança
• http://git.kernel.org/?p=boot/dracut/dracut.git%3Ba=commit%3Bh=e1b48995c26c4f06d1a71 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-4453 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-4453 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2012-4453 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/09/27/3 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=859448 · Correção
• https://access.redhat.com/security/cve/CVE-2012-4453 · Nota
• http://rhn.redhat.com/errata/RHSA-2013-1674.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79258 · Nota
• https://osv.dev/vulnerability/CVE-2012-4453 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10225-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2012-4453 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/09/27/6 · Nota
• https://suse.com/security/cve/CVE-2012-4453 · Nota