PT-2001-2025 · Red Hat · Red Hat

Published 2001-12-06 · Updated 2017-10-10 · CVE-2001-0859

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Linux 7.1 kernel versions 2.4.3-12

Description The issue concerns the default umask setting for init in the Red Hat Linux 7.1 Korean installation program, which is set to 000. This results in the installation of files with world-writeable permissions.

Recommendations For kernel version 2.4.3-12, consider changing the default umask setting for init to a more secure value to prevent the installation of files with world-writeable permissions.

Fix

Related Identifiers

CVE-2001-0859

Affected Products

Red Hat

References · 5

• http://online.securityfocus.com/advisories/3725 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2001-148.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0859 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7549 · Note
• http://securityfocus.com/bid/3527 · Note