CVE-2007-6283
Fixed in a distro release EPSS <1%
Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.
Products: fedoraproject fedora_core, redhat enterprise_linux, oracle linux, centos, redhat enterprise_linux_desktop, redhat enterprise_linux_for_ibm_z_systems, redhat enterprise_linux_for_power_big_endian, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 5 | bind | 30:9.3.4-6.P1.el5 |
| Red Hat Enterprise Linux 5 | bind-chroot | 30:9.3.4-6.P1.el5 |
| Red Hat Enterprise Linux 5 | bind-debuginfo | 30:9.3.4-6.P1.el5 |
| Red Hat Enterprise Linux 5 | bind-devel | 30:9.3.4-6.P1.el5 |
| Red Hat Enterprise Linux 5 | bind-libbind-devel | 30:9.3.4-6.P1.el5 |
| Red Hat Enterprise Linux 5 | bind-libs | 30:9.3.4-6.P1.el5 |
| Red Hat Enterprise Linux 5 | bind-sdb | 30:9.3.4-6.P1.el5 |
| Red Hat Enterprise Linux 5 | bind-utils | 30:9.3.4-6.P1.el5 |
| Red Hat Enterprise Linux 5 | caching-nameserver | 30:9.3.4-6.P1.el5 |