PT-2012-5409

CVE-2012-4453

Published

2012-10-09

Updated

2024-06-15

Description by

CVSS 2.0

2.1

Low

MetricsAV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions dracut versions in Red Hat Enterprise Linux 6, Fedora 16 and 17

Description The issue allows local users to potentially obtain sensitive information due to world-readable permissions in initramfs images created by dracut.sh.

Recommendations For Red Hat Enterprise Linux 6, consider changing the permissions of initramfs images to prevent world-readable access. For Fedora 16 and 17, restrict access to the initramfs images until a fix is applied.

Exploitability

Fix

Impacts

Researchers

Huzaifa Sidhpurwala

Vendors

Affected products

Weakness enumeration

CWE-276: Incorrect Default Permissions

Related identifiers

CVE-2012-4453

OPENSUSE-SU-2024:10225-1