Input validation

2007-12-1801:46:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

28.4%

JSON

Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.

CPENameOperatorVersion
centoseq5
linuxeq5.0
enterprise_linuxeq5.0
enterprise_linux_desktopeq5.0
enterprise_linux_for_ibm_z_systemseq5.0.0-s390-x
enterprise_linux_for_power_big_endianeq5.0
enterprise_linux_servereq5.0
enterprise_linux_workstationeq5.0

Name	Operator	Version
centos	eq	5
linux	eq	5.0
enterprise_linux	eq	5.0
enterprise_linux_desktop	eq	5.0
enterprise_linux_for_ibm_z_systems	eq	5.0.0-s390-x
enterprise_linux_for_power_big_endian	eq	5.0
enterprise_linux_server	eq	5.0
enterprise_linux_workstation	eq	5.0