CVE
- Id
- 692
- CVE No.
- CVE-1999-0712
- Status
- Candidate
- Description
- A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.
- Phase
- Proposed (19991214)
- Votes
- ACCEPT(4) Baker, Cole, Frech, Stracener | MODIFY(1) Blake | NOOP(1) Armstrong | REVIEWING(1) Christey
- Comments
- Blake> This obscurely-written advisory seems to state that COAS will make the | file world-readable, not that it allows the user to make it so. I hardly | think that allowing the user to turn off security is a vulnerability. | Christey> It"s difficult to write the description based on what"s in | the advisory. If COAS inadvertently changes permissions | without user confirmation, then it should be ACCEPTed with | appropriate modification to the description. | Christey> ADDREF BID:137 | CHANGE> [Armstrong changed vote from REVIEWING to NOOP]
