CVE

Id
5239  
CVE No.
CVE-2002-0849  
Status
Candidate  
Description
Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password.  
Phase
Modified (20050610)  
Votes
MODIFY(2) Foat, Frech | NOOP(4) Armstrong, Christey, Cole, Wall | REJECT(1) Cox  
Comments
Cox> CD:EX-BETA | Foat> The candidate notes that this vulnerability pertains to "some | operating systems" and specifically mentions only Red Hat Linux Limbo Beta #1. | We found the file to be world readable on Red Hat Linux 7.2. | Frech> XF:linux-iscsi-conf-insecure(9792) | Christey> MISC:http://www.seifried.org/security/advisories/kssa-004.html  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
27970 5239 CVE-2002-0849 BUGTRAQ:20020808 iDEFENSE Security Advisory: iSCSI Default Configuration File Settings  View
27971 5239 CVE-2002-0849 URL:http://marc.info/?l=bugtraq&m=102882056105806&w=2  View
27972 5239 CVE-2002-0849 BUGTRAQ:20020808 Re: [VulnWatch] iDEFENSE Security Advisory: iSCSI Default Configuration File Settings  View
27973 5239 CVE-2002-0849 URL:http://marc.info/?l=bugtraq&m=102891036424424&w=2  View
27974 5239 CVE-2002-0849 BID:5423  View
27975 5239 CVE-2002-0849 URL:http://www.securityfocus.com/bid/5423  View
27976 5239 CVE-2002-0849 XF:linux-iscsi-conf-insecure(9792)  View

Related JVN