CVE-2010-1439

Description

yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security updates, by leveraging authentication data from this file.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.048

Associated Vulnerability

Vulnerability	OS Platform
(RHSA-2010:0449) Moderate: rhn-client-tools security update rhn-check-0.4.20-33.el5_5.2.noarch.rpm	Linux
(RHSA-2010:0449) Moderate: rhn-client-tools security update rhn-client-tools-0.4.20-33.el5_5.2.noarch.rpm	Linux
(RHSA-2010:0449) Moderate: rhn-client-tools security update rhn-setup-0.4.20-33.el5_5.2.noarch.rpm	Linux
(RHSA-2010:0449) Moderate: rhn-client-tools security update rhn-setup-gnome-0.4.20-33.el5_5.2.noarch.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234