Red Hat Security AdvisoryRHSA-2010:0449
rhn-client-tools security update
Released 2010-06-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) rhn-check-0.4.20-33.el5_5.2, rhn-client-tools-0.4.20-33.el5_5.2, rhn-setup-0.4.20-33.el5_5.2 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) rhn-check-0.4.20-33.el5_5.2, rhn-client-tools-0.4.20-33.el5_5.2, rhn-setup-0.4.20-33.el5_5.2 +1
Fixes 1 record
Priority LOW 17
yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local user…
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.00399 · Published 2010-06-07 · Partial fix CWE-264
