PT-2013-3526

CVE-2013-2069

·

Published

2013-05-29

·

Updated

2022-06-27

Description by

CVSS 2.0
7.2
High
MetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions livecd-tools versions prior to 13.4.4 livecd-tools versions 17.x prior to 17.17 livecd-tools versions 18.x prior to 18.16 livecd-tools versions 19.x prior to 19.3
Description The issue allows local users to gain privileges when a rootpw directive is not set in a Kickstart file, resulting in an empty root user password.
Recommendations For livecd-tools versions prior to 13.4.4, update to version 13.4.4 or later. For livecd-tools versions 17.x prior to 17.17, update to version 17.17 or later. For livecd-tools versions 18.x prior to 18.16, update to version 18.16 or later. For livecd-tools versions 19.x prior to 19.3, update to version 19.3 or later.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾