Red Hat Security AdvisoryRHSA-2007:0497
iscsi-initiator-utils security update
Released 2007-06-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) iscsi-initiator-utils-6.2.0.742-0.6.el5, iscsi-initiator-utils-6.2.0.742-0.6.el5.i386, iscsi-initiator-utils-6.2.0.742-0.6.el5.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) iscsi-initiator-utils-6.2.0.742-0.6.el5, iscsi-initiator-utils-6.2.0.742-0.6.el5.i386
Fixes 2 records
Priority LOW 13
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00759 · Published 2007-06-14 · Fixed
Priority LOW 11
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00384 · Published 2007-06-14 · Fixed
