CVE-2008-2367
Fixed in a distro release EPSS <1%
Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files.
Products: redhat certificate_system
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat certificate system 7.2 | pkisetup | 0:7.2.0-7 |
| Red Hat certificate system 7.2 | rhpki-ca | 0:7.2.0-6 |
| Red Hat certificate system 7.2 | rhpki-common | 0:7.2.0-16 |
| Red Hat certificate system 7.2 | rhpki-kra | 0:7.2.0-5 |
| Red Hat certificate system 7.2 | rhpki-ocsp | 0:7.2.0-5 |
| Red Hat certificate system 7.2 | rhpki-tks | 0:7.2.0-5 |
| Red Hat certificate system 7.2 | rhpki-tps | 0:7.2.0-8 |
| Red Hat certificate system 7.3 | pkisetup | 0:7.3.0-14.el4 |
| Red Hat certificate system 7.3 | rhpki-ca | 0:7.3.0-17.el4 |
| Red Hat certificate system 7.3 | rhpki-common | 0:7.3.0-40.el4 |
| Red Hat certificate system 7.3 | rhpki-kra | 0:7.3.0-13.el4 |
| Red Hat certificate system 7.3 | rhpki-ocsp | 0:7.3.0-11.el4 |
| Red Hat certificate system 7.3 | rhpki-ra | 0:7.3.0-67.el4 |
| Red Hat certificate system 7.3 | rhpki-tks | 0:7.3.0-12.el4 |
| Red Hat certificate system 7.3 | rhpki-tps | 0:7.3.0-23.el4 |
| Red Hat certificate system 7.3 | rhpki-util | 0:7.3.0-20.el4 |