PT-2012-5409

CVE-2012-4453

Publicado

2012-10-09

Atualizado

2024-06-15

Descrição por

CVSS 2.0

2.1

Baixa

MétricasAV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions dracut versions in Red Hat Enterprise Linux 6, Fedora 16 and 17

Description The issue allows local users to potentially obtain sensitive information due to world-readable permissions in initramfs images created by dracut.sh.

Recommendations For Red Hat Enterprise Linux 6, consider changing the permissions of initramfs images to prevent world-readable access. For Fedora 16 and 17, restrict access to the initramfs images until a fix is applied.

Explorabilidade

Correção

Impactos

Pesquisadores

Huzaifa Sidhpurwala

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-276: Incorrect Default Permissions

Identificadores relacionados

CVE-2012-4453

OPENSUSE-SU-2024:10225-1