NVD

Id
58278  
Name
CVE-2007-6283  
Description
Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-12-17  
Modified Date
2010-08-21  
Seq
2007-6283  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
298780 58278 CVE-2007-6283 oval:org.mitre.oval:def:9977  View
298781 58278 CVE-2007-6283 RHSA-2008:0300  View
298782 58278 CVE-2007-6283 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-6283  View
298783 58278 CVE-2007-6283 FEDORA-2007-4655  View
298784 58278 CVE-2007-6283 FEDORA-2007-4658  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52480 JVNDB-2007-001172 Red Hat および Fedora の Bind における認証なしで named コマンドを実行される脆弱性 Red Hat Enterprise Linux および Fedora の Bind はインストールされる /etc/rndc.key が world-writable な権限に設定されており、認証無しで named コマンドを実行される脆弱性が存在します。 CVE-2007-6283 29638 CVE-2007-6283 58278 4.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001172.html 2007-12-17 2008-09-02 View