Lucene search
+L

520 matches found

OSV
OSV
•added 2012/10/09 11:55 p.m.•9 views

DEBIAN-CVE-2012-4453

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information...

2.1CVSS6.6AI score0.00364EPSS
SaveExploits0References1
OSV
OSV
•added 2012/10/09 11:55 p.m.•29 views

UBUNTU-CVE-2012-4453

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information...

2.1CVSS7.1AI score0.00364EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2012/10/09 11:00 p.m.•28 views

CVE-2012-4453

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information...

5.9AI score0.00364EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2012/10/09 11:00 p.m.•27 views

CVE-2012-4453

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information...

2.1CVSS7.4AI score0.00364EPSS
SaveExploits0
CVE
CVE
•added 2012/10/09 11:00 p.m.•108 views

CVE-2012-4453

CVE-2012-4453 affects dracut: dracut.sh can create initramfs images with world-readable permissions, potentially exposing sensitive information. Public references confirm impact on Red Hat Enterprise Linux 6 and related distributions, with multiple advisories linking this CVE to dracut-related up...

2.1CVSS6AI score0.00364EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/10/09 12:00 a.m.•5 views

CVE-2012-4453: Incorrect Default Permissions

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information...

2.1CVSS5.8AI score0.00364EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2012/10/09 12:00 a.m.•5 views

PT-2012-5409

Name of the Vulnerable Software and Affected Versions dracut versions in Red Hat Enterprise Linux 6, Fedora 16 and 17 Description The issue allows local users to potentially obtain sensitive information due to world-readable permissions in initramfs images created by dracut.sh. Recommendations Fo...

2.1CVSS0.00364EPSS
SaveExploits0References21
NVD
NVD
•added 2010/12/07 10:00 p.m.•32 views

CVE-2010-4176

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users...

4CVSS5.9AI score0.02323EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2010/12/07 10:00 p.m.•25 views

CVE-2010-4176

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users...

4CVSS7.1AI score0.02323EPSS
SaveExploits0References1
Prion
Prion
•added 2010/12/07 10:00 p.m.•21 views

Code injection

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users...

4CVSS6.4AI score0.02323EPSS
SaveExploits0References9
CVE
CVE
•added 2010/12/07 9:00 p.m.•79 views

CVE-2010-4176

CVE-2010-4176 describes a permission issue in plymouth-pretrigger.sh used by dracut/udev on Fedora 13 and 14. The script sets weak permissions on the /dev/systty device file, enabling remote authenticated users to read terminal data from tty0 for local users. Connected sources (OSV/OpenVAS/CVE re...

4CVSS7.3AI score0.02323EPSS
SaveExploits0References9Affected Software2
Cvelist
Cvelist
•added 2010/12/07 9:00 p.m.•60 views

CVE-2010-4176

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users...

8.7AI score0.02323EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2010/12/07 9:00 p.m.•63 views

CVE-2010-4176

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users...

4CVSS7.2AI score0.02323EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/12/07 12:00 a.m.•5 views

CVE-2010-4176: Incorrect Default Permissions

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users...

4CVSS5.8AI score0.02323EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2010/12/07 12:00 a.m.•9 views

PT-2010-5337

Name of the Vulnerable Software and Affected Versions dracut versions on Fedora 13 and 14 udev versions on Fedora 13 and 14 Description The issue allows remote authenticated users to read terminal data from tty0 for local users due to weak permissions set for the /dev/systty device file by...

4CVSS0.02323EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2010/12/03 12:00 a.m.•26 views

Fedora 13 : udev-153-5.fc13 (2010-17912)

It was discovered that /dev/systty device file created by dracut-generated initramfs scripts used an insecure file permissions. This could possibly allow local user to snoop on other user's terminal. Updated dracut no longer creates this file as device file, rather creates it a symbolic link to...

4CVSS7.3AI score0.02323EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2010/12/02 12:00 a.m.•19 views

Fedora Update for dracut FEDORA-2010-17930

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4CVSS9.5AI score0.02323EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/12/02 12:00 a.m.•34 views

Fedora Update for dracut FEDORA-2010-17930

Check for the Version of dracut OpenVAS Vulnerability Test Fedora Update for dracut FEDORA-2010-17930 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

4CVSS9.5AI score0.02323EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2010/11/28 12:00 a.m.•20 views

Fedora 14 : dracut-006-5.fc14 / udev-161-7.fc14 (2010-17930)

It was discovered that /dev/systty device file created by dracut-generated initramfs scripts used an insecure file permissions. This could possibly allow local user to snoop on other user's terminal. Updated dracut no longer creates this file as device file, rather creates it a symbolic link to...

4CVSS7.3AI score0.02323EPSS
SaveExploits0References4
Fedora
Fedora
•added 2010/11/24 10:38 p.m.•71 views

[SECURITY] Fedora 14 Update: dracut-006-5.fc14

Dracut contains tools to create a bootable initramfs for 2.6 Linux kernels. Unlike existing implementations, dracut does hard-code as little as possible into the initramfs. Dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as...

4CVSS2.5AI score0.02323EPSS
SaveExploits0
Rows per page
Query Builder