CVE-2010-2241
Fixed in a distro release EPSS <1%
The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts.
Products: redhat directory_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat directory server 8 | idm-console-framework | 0:1.1.5-1.el5idm |
| Red Hat directory server 8 | jss | 0:4.2.6-6.el5idm |
| Red Hat directory server 8 | jss-debuginfo | 0:4.2.6-6.el5idm |
| Red Hat directory server 8 | redhat-admin-console | 0:8.2.0-2.el5dsrv |
| Red Hat directory server 8 | redhat-ds | 0:8.2.0-2.el5dsrv |
| Red Hat directory server 8 | redhat-ds-admin | 0:8.2.0-3.el5dsrv |
| Red Hat directory server 8 | redhat-ds-admin-debuginfo | 0:8.2.0-3.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base | 0:8.2.0-13.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base-debuginfo | 0:8.2.0-13.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base-devel | 0:8.2.0-13.el5dsrv |
| Red Hat directory server 8 | redhat-ds-console | 0:8.2.0-4.el5dsrv |
| Red Hat directory server 8 | redhat-idm-console | 0:1.0.2-1.el5idm |
| Red Hat directory server 8 | redhat-idm-console-debuginfo | 0:1.0.2-1.el5idm |