CVE-2014-0246

The CVE-2014-0246 issue affects SOSreport: it stores the md5 hash of the GRUB bootloader password inside an archive, enabling local users to read sensitive information. This is a local information-disclosure risk tied to SOSreport. Some connected advisories describe Fedora updates to sos packages...

CVE-2014-0246

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

CVE-2014-0246

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

CVE-2014-0246: Undefined Security Weakness

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

PT-2014-3553

Name of the Vulnerable Software and Affected Versions SOSreport affected versions not specified Description The issue allows local users to obtain sensitive information by reading the archive where SOSreport stores the md5 hash of the GRUB bootloader password. Recommendations At the moment, there...

DEBIAN-CVE-2013-4577

A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the passwordpbkdf2 directive in the file...

CVE-2013-4577

A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the passwordpbkdf2 directive in the file...

CVE-2013-4577

A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the passwordpbkdf2 directive in the file...

Default credentials

A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the passwordpbkdf2 directive in the file...

CVE-2013-4577

A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the passwordpbkdf2 directive in the file...

UBUNTU-CVE-2013-4577

A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the passwordpbkdf2 directive in the file...

CVE-2013-4577

A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the passwordpbkdf2 directive in the file...

CVE-2013-4577

CVE-2013-4577 affects GNU GRUB via a Debian patch that leaves grub.cfg world-readable, allowing local users to read password hashes (via the password_pbkdf2 directive). The impact is partial confidentiality; exploitation details are not provided in the supplied documents, and no remediation infor...

CVE-2013-4577

A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the passwordpbkdf2 directive in the file...

CVE-2013-4577: Undefined Security Weakness

A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the passwordpbkdf2 directive in the file...

PT-2014-2837 · Debian +1 · Debian +1

Name of the Vulnerable Software and Affected Versions: Debian affected versions not specified Description: The issue concerns a Debian patch for GNU GRUB that uses world-readable permissions for the grub.cfg file. This allows local users to obtain password hashes by reading the password pbkdf2...

SuSE 11.1 Security Update : Xen (SAT Patch Number 6399)

Three security issues were found in XEN. Two security issues are fixed by this update : - Due to incorrect fault handling in the XEN hypervisor it was possible for a XEN guest domain administrator to execute code in the XEN host environment. CVE-2012-0217 - Also a guest user could crash the guest...

PT-2012-3945 · Anaconda · Anaconda

Name of the Vulnerable Software and Affected Versions: Anaconda affected versions not specified Description: The issue concerns the bootloader configuration module in Anaconda, specifically the pyanaconda/bootloader.py file, which sets 755 permissions for /etc/grub.d. This setting allows local...

SuSE 10 Security Update : Xen (ZYPP Patch Number 8180)

Three security issues were found in XEN. Two security issues are fixed by this update : - Due to incorrect fault handling in the XEN hypervisor it was possible for a XEN guest domain administrator to execute code in the XEN host environment. CVE-2012-0217 - Also a guest user could crash the guest...

Low: Red Hat Security Advisory: virt-v2v security and bug fix update

An updated virt-v2v package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...