CVEvulnerability
CVE-2014-3209
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-11-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file.
Affected configurations
• nlnetlabs ldns 1.6.0
• nlnetlabs ldns 1.6.1
• nlnetlabs ldns 1.6.2
• nlnetlabs ldns 1.6.3
• nlnetlabs ldns 1.6.4
• nlnetlabs ldns 1.6.5
• nlnetlabs ldns 1.6.6
• nlnetlabs ldns 1.6.7
• nlnetlabs ldns 1.6.8
• nlnetlabs ldns 1.6.9
• nlnetlabs ldns 1.6.10
• nlnetlabs ldns 1.6.11
Related
Weakness · not in database (1)
References
- http://www.openwall.com/lists/oss-security/2014/05/03/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2014/05/05/4 www.openwall.com
- http://www.securityfocus.com/bid/67200 www.securityfocus.com
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746758 bugs.debian.org
- https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=573 www.nlnetlabs.nl
- http://www.openwall.com/lists/oss-security/2014/05/03/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2014/05/05/4 www.openwall.com
- http://www.securityfocus.com/bid/67200 www.securityfocus.com
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746758 bugs.debian.org
- https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=573 www.nlnetlabs.nl