CVE-2007-6283

2007-12-1801:46:00

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

Confidence

High

EPSS

0.001

Percentile

27.5%

JSON

Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.

Affected configurations

Nvd

Node

fedoraprojectfedora_core

redhatenterprise_linuxMatch5.0

Node

oraclelinuxMatch5.0

Node

centoscentosMatch5

Node

redhatenterprise_linux_desktopMatch5.0

redhatenterprise_linux_for_ibm_z_systemsMatch5.0_s390x

redhatenterprise_linux_for_power_big_endianMatch5.0

redhatenterprise_linux_serverMatch5.0

redhatenterprise_linux_workstationMatch5.0

VendorProductVersionCPE
fedoraprojectfedora_core*cpe:2.3:o:fedoraproject:fedora_core:*:*:*:*:*:*:*:*
redhatenterprise_linux5.0cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
oraclelinux5.0cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*
centoscentos5cpe:2.3:o:centos:centos:5:*:*:*:*:*:*:*
redhatenterprise_linux_desktop5.0cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
redhatenterprise_linux_for_ibm_z_systems5.0_s390xcpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:5.0_s390x:*:*:*:*:*:*:*
redhatenterprise_linux_for_power_big_endian5.0cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:5.0:*:*:*:*:*:*:*
redhatenterprise_linux_server5.0cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
redhatenterprise_linux_workstation5.0cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fedoraproject	fedora_core	*	cpe:2.3:o:fedoraproject:fedora_core::::::::
redhat	enterprise_linux	5.0	cpe:2.3:o:redhat:enterprise_linux:5.0:::::::*
oracle	linux	5.0	cpe:2.3:o:oracle:linux:5.0:::::::*
centos	centos	5	cpe:2.3:o:centos:centos:5:::::::*
redhat	enterprise_linux_desktop	5.0	cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:::::::*
redhat	enterprise_linux_for_ibm_z_systems	5.0_s390x	cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:5.0_s390x:::::::*
redhat	enterprise_linux_for_power_big_endian	5.0	cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:5.0:::::::*
redhat	enterprise_linux_server	5.0	cpe:2.3:o:redhat:enterprise_linux_server:5.0:::::::*
redhat	enterprise_linux_workstation	5.0	cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:::::::*