Red Hat Security AdvisoryRHSA-2012:1369
rhncfg security, bug fix, and enhancement update
Released 2012-10-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHN Tools (v. 5 Client) rhncfg-5.10.27-8.el5sat, rhncfg-actions-5.10.27-8.el5sat, rhncfg-client-5.10.27-8.el5sat +1
- RHN Tools (v. 5 Server) rhncfg-5.10.27-8.el5sat, rhncfg-actions-5.10.27-8.el5sat, rhncfg-client-5.10.27-8.el5sat +1
- RHN Tools (v. 5.3.LL Server) rhncfg-5.10.27-8.el5sat, rhncfg-actions-5.10.27-8.el5sat, rhncfg-client-5.10.27-8.el5sat +1
- RHN Tools (v. 5.6.z Server) rhncfg-5.10.27-8.el5sat, rhncfg-actions-5.10.27-8.el5sat, rhncfg-client-5.10.27-8.el5sat +1
- RHN Tools (v. 6 Client) rhncfg-5.10.27-8.el6sat, rhncfg-actions-5.10.27-8.el6sat, rhncfg-client-5.10.27-8.el6sat +1
- RHN Tools (v. 6 ComputeNode) rhncfg-5.10.27-8.el6sat, rhncfg-actions-5.10.27-8.el6sat, rhncfg-client-5.10.27-8.el6sat +1
- RHN Tools (v. 6 Workstation) rhncfg-5.10.27-8.el6sat, rhncfg-actions-5.10.27-8.el6sat, rhncfg-client-5.10.27-8.el6sat +1
- RHN Tools (v. 6.0.z Server) rhncfg-5.10.27-8.el6sat, rhncfg-actions-5.10.27-8.el6sat, rhncfg-client-5.10.27-8.el6sat +1
- RHN Tools (v. 6.1.z Server) rhncfg-5.10.27-8.el6sat, rhncfg-actions-5.10.27-8.el6sat, rhncfg-client-5.10.27-8.el6sat +1
- RHN Tools (v. 6.2.z Server) rhncfg-5.10.27-8.el6sat, rhncfg-actions-5.10.27-8.el6sat, rhncfg-client-5.10.27-8.el6sat +1
- RHN Tools (v. 6.3.z Server) rhncfg-5.10.27-8.el6sat, rhncfg-actions-5.10.27-8.el6sat, rhncfg-client-5.10.27-8.el6sat +1
Fixes 1 record
Priority LOW 11
Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-readable) for /var/log/rhncfg-actions, which allows local users to obtain sensitive information about the…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00389 · Published 2012-10-22 · Fixed CWE-264
