CVEvulnerability
CVE-2007-6283
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-200
Description
Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.
Affected configurations
• fedoraproject fedora core
• redhat enterprise linux 5.0
• oracle linux 5.0
• centos centos 5
• redhat enterprise linux desktop 5.0
• redhat enterprise linux for ibm z systems 5.0 s390x
• redhat enterprise linux for power big endian 5.0
• redhat enterprise linux server 5.0
• redhat enterprise linux workstation 5.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://secunia.com/advisories/28180 Third Party Advisory
- http://secunia.com/advisories/30313 Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0300.html Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-6283 Issue Tracking, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9977 Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00587.html Vendor Advisory
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00671.html Vendor Advisory
- http://secunia.com/advisories/28180 Third Party Advisory
- http://secunia.com/advisories/30313 Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0300.html Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-6283 Issue Tracking, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9977 Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00587.html Vendor Advisory
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00671.html Vendor Advisory