CVE

Id
32484  
CVE No.
CVE-2008-2367  
Status
Candidate  
Description
Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files.  
Phase
Assigned (20080521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
351406 32484 CVE-2008-2367 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=451998  View
351407 32484 CVE-2008-2367 REDHAT:RHSA-2009:0006  View
351408 32484 CVE-2008-2367 URL:https://rhn.redhat.com/errata/RHSA-2009-0006.html  View
351409 32484 CVE-2008-2367 REDHAT:RHSA-2009:0007  View
351410 32484 CVE-2008-2367 URL:https://rhn.redhat.com/errata/RHSA-2009-0007.html  View
351411 32484 CVE-2008-2367 BID:33288  View
351412 32484 CVE-2008-2367 URL:http://www.securityfocus.com/bid/33288  View
351413 32484 CVE-2008-2367 VUPEN:ADV-2009-0145  View
351414 32484 CVE-2008-2367 URL:http://www.vupen.com/english/advisories/2009/0145  View
351415 32484 CVE-2008-2367 SECTRACK:1021608  View
351416 32484 CVE-2008-2367 URL:http://securitytracker.com/id?1021608  View
351417 32484 CVE-2008-2367 SECUNIA:33540  View
351418 32484 CVE-2008-2367 URL:http://secunia.com/advisories/33540  View
351419 32484 CVE-2008-2367 XF:redhat-cs-configfile-info-disclosure(48021)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46505 JVNDB-2008-001815 PCRE ライブラリにおける正規表現の処理に関するバッファオーバーフローの脆弱性 Perl-Compatible Regular Expression (PCRE) ライブラリの pcre_compile.c には、正規表現の処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-2371 32484 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001815.html  View