CVE

Id
44023  
CVE No.
CVE-2010-1439  
Status
Candidate  
Description
yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security updates, by leveraging authentication data from this file.  
Phase
Assigned (20100415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
480497 44023 CVE-2010-1439 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=585386  View
480498 44023 CVE-2010-1439 REDHAT:RHSA-2010:0449  View
480499 44023 CVE-2010-1439 URL:http://www.redhat.com/support/errata/RHSA-2010-0449.html  View
480500 44023 CVE-2010-1439 BID:40492  View
480501 44023 CVE-2010-1439 URL:http://www.securityfocus.com/bid/40492  View
480502 44023 CVE-2010-1439 OSVDB:65063  View
480503 44023 CVE-2010-1439 URL:http://www.osvdb.org/65063  View
480504 44023 CVE-2010-1439 OVAL:oval:org.mitre.oval:def:9232  View
480505 44023 CVE-2010-1439 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9232  View
480506 44023 CVE-2010-1439 SECTRACK:1024049  View
480507 44023 CVE-2010-1439 URL:http://securitytracker.com/id?1024049  View
480508 44023 CVE-2010-1439 SECUNIA:39996  View
480509 44023 CVE-2010-1439 URL:http://secunia.com/advisories/39996  View
480510 44023 CVE-2010-1439 VUPEN:ADV-2010-1311  View
480511 44023 CVE-2010-1439 URL:http://www.vupen.com/english/advisories/2010/1311  View
480512 44023 CVE-2010-1439 XF:redhat-clienttools-loginauth-security-bypass(59114)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39899 JVNDB-2010-005684 VideoLAN VLC media player の XSPF プレイリストパーサの modules/demux/playlist/xspf.c におけるサービス運用妨害 (DoS) の脆弱性 VideoLAN VLC media player の XSPF プレイリストパーサの modules/demux/playlist/xspf.c の parse_track_node 関数には、サービス運用妨害 (NULL ポインタデリファレンスおよびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2010-1443 44023 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005684.html  View