NVD

Id
31448  
Name
CVE-2014-3209  
Description
The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-11-15  
Modified Date
2014-11-17  
Seq
2014-3209  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164988 31448 CVE-2014-3209 [oss-security] 20140503 ldns-keygen creates private key world readable  View
164989 31448 CVE-2014-3209 [oss-security] 20140504 Re: ldns-keygen creates private key world readable  View
164990 31448 CVE-2014-3209 67200  View
164991 31448 CVE-2014-3209 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746758  View
164992 31448 CVE-2014-3209 https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=573  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16604 JVNDB-2014-005479 ldns の ldns-keygen ツールにおける秘密鍵を取得される脆弱性 ldns の ldns-keygen ツールは、秘密鍵の権限を設定するのに現在の umask を利用するため、秘密鍵を取得される脆弱性が存在します。 CVE-2014-3209 70496 CVE-2014-3209 31448 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005479.html 2014-04-07 2014-11-18 View