CVE

Id
32485  
CVE No.
CVE-2008-2368  
Status
Candidate  
Description
Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files.  
Phase
Assigned (20080521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
351420 32485 CVE-2008-2368 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=452000  View
351421 32485 CVE-2008-2368 REDHAT:RHSA-2009:0006  View
351422 32485 CVE-2008-2368 URL:https://rhn.redhat.com/errata/RHSA-2009-0006.html  View
351423 32485 CVE-2008-2368 REDHAT:RHSA-2009:0007  View
351424 32485 CVE-2008-2368 URL:https://rhn.redhat.com/errata/RHSA-2009-0007.html  View
351425 32485 CVE-2008-2368 BID:33288  View
351426 32485 CVE-2008-2368 URL:http://www.securityfocus.com/bid/33288  View
351427 32485 CVE-2008-2368 VUPEN:ADV-2009-0145  View
351428 32485 CVE-2008-2368 URL:http://www.vupen.com/english/advisories/2009/0145  View
351429 32485 CVE-2008-2368 SECTRACK:1021608  View
351430 32485 CVE-2008-2368 URL:http://securitytracker.com/id?1021608  View
351431 32485 CVE-2008-2368 SECUNIA:33540  View
351432 32485 CVE-2008-2368 URL:http://secunia.com/advisories/33540  View
351433 32485 CVE-2008-2368 XF:redhat-cs-debuglog-info-disclosure(48022)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46344 JVNDB-2008-001654 Linux kernel の get_user_pages 関数の呼び出し処理におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel には、get_user_pages 関数の呼び出し処理に不備があり、サービス運用妨害 (DoS) 状態の脆弱性が存在します。 CVE-2008-2372 32485 4.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001654.html  View