PT-2015-7895 · Mageia · Mageia

Publicado 2015-04-23 · Atualizado 2015-04-23

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Mageia 4 versions (affected versions not specified, but only new installations are affected)

Description A security issue was identified where the /etc/shadow and /etc/gshadow files containing password hashes were created with incorrect permissions, making them world-readable. This issue only affected new installations of Mageia 4. The problem has been fixed by ensuring that these files are owned by the root user and shadow group, and are only readable by those two entities.

Recommendations For new Mageia 4 installations, update the setup package to the latest version to fix the issue. At the moment, there is no information about additional mitigation measures for this specific issue.

Identificadores relacionados

MGASA-2015-0162

Produtos afetados

Mageia

Referências · 6

• http://advisories.mageia.org/MGASA-2015-0116.html · Nota
• https://ml.mageia.org/l/arc/qa-discuss/2015-03/msg00399.html · Nota
• https://advisories.mageia.org/MGASA-2015-0162.html · Nota de Segurança
• https://bugs.mageia.org/show_bug.cgi?id=15644 · Nota
• https://osv.dev/vulnerability/MGASA-2015-0162 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=14516 · Nota