CVE-2010-4176

Name of the Vulnerable Software and Affected Versions dracut versions on Fedora 13 and 14 udev versions on Fedora 13 and 14

Description The issue allows remote authenticated users to read terminal data from tty0 for local users due to weak permissions set for the /dev/systty device file by plymouth-pretrigger.sh in dracut and udev.

Recommendations For dracut on Fedora 13 and 14, consider updating the permissions of the /dev/systty device file to restrict access. For udev on Fedora 13 and 14, restrict access to the /dev/systty device file until a proper fix is applied.