CVE-2016-4036

Description

The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses weak permissions for /etc/quagga, which allows local users to obtain sensitive information by reading files in the directory.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.041

Associated Vulnerability

Vulnerability	OS Platform
BGP/OSPF/RIP routing daemon (USN-3102-1) quagga_0.99.22.4-3ubuntu1.2_i386.deb	Linux
BGP/OSPF/RIP routing daemon (USN-3102-1) quagga_0.99.22.4-3ubuntu1.2_amd64.deb	Linux
BGP/OSPF/RIP routing daemon (USN-3102-1) quagga_0.99.24.1-2ubuntu1.1_i386.deb	Linux
BGP/OSPF/RIP routing daemon (USN-3102-1) quagga_0.99.24.1-2ubuntu1.1_amd64.deb	Linux
BGP/OSPF/RIP routing daemon (USN-3102-1) quagga_0.99.20.1-0ubuntu0.12.04.5_i386.deb	Linux
BGP/OSPF/RIP routing daemon (USN-3102-1) quagga_0.99.20.1-0ubuntu0.12.04.5_amd64.deb	Linux
quagga security update(DSA-3654-1) quagga_0.99.23.1-1+deb8u2_i386.deb	Linux
quagga security update(DSA-3654-1) quagga_0.99.23.1-1+deb8u2_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234