PT-2007-7155 · Red Hat+1 · Fedora+2

Published 2007-12-18 · Updated 2022-02-25 · CVE-2007-6283

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux versions 5 Fedora (affected versions not specified)

Description The issue allows local users to perform unauthorized named commands due to the Bind /etc/rndc.key file having world-readable permissions. This can lead to a denial of service by stopping named.

Recommendations For Red Hat Enterprise Linux version 5, change the permissions of the /etc/rndc.key file to prevent world-readable access. For Fedora, change the permissions of the /etc/rndc.key file to prevent world-readable access.

Fix

DoS

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2007-6283

RHSA-2008:0300

RHSA-2008_0300

Affected Products

Bind

Fedora

Red Hat

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2007-6283 · Security Note
• https://redhat.com/archives/fedora-package-announce/2007-December/msg00671.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2007-December/msg00587.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0300.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-6283 · Vendor Advisory
• http://secunia.com/advisories/28180 · Note
• https://access.redhat.com/errata/RHSA-2008:0300 · Note
• https://access.redhat.com/security/cve/CVE-2007-6283 · Note
• http://secunia.com/advisories/30313 · Note
• https://access.redhat.com/security/cve/CVE-2008-0122 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9977 · Note