Lucene search
RedhatCVE-2014-3209HistoryNov 16, 2014 - 1:59 a.m.
CVE-2014-3209
2014-11-1601:59:03
CWE-264
redhat
web.nvd.nist.gov
30
ldns
ldns-keygen
umask
privileges
nvd
cve-2014-3209
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
8.6
Confidence
High
EPSS
0
Percentile
5.1%
The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file.
Affected configurations
Node
nlnetlabsldnsMatch1.6.0
ORnlnetlabsldnsMatch1.6.1
ORnlnetlabsldnsMatch1.6.2
ORnlnetlabsldnsMatch1.6.3
ORnlnetlabsldnsMatch1.6.4
ORnlnetlabsldnsMatch1.6.5
ORnlnetlabsldnsMatch1.6.6
ORnlnetlabsldnsMatch1.6.7
ORnlnetlabsldnsMatch1.6.8
ORnlnetlabsldnsMatch1.6.9
ORnlnetlabsldnsMatch1.6.10
ORnlnetlabsldnsMatch1.6.11
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nlnetlabs | ldns | 1.6.0 | cpe:2.3:a:nlnetlabs:ldns:1.6.0:*:*:*:*:*:*:* |
| nlnetlabs | ldns | 1.6.1 | cpe:2.3:a:nlnetlabs:ldns:1.6.1:*:*:*:*:*:*:* |
| nlnetlabs | ldns | 1.6.2 | cpe:2.3:a:nlnetlabs:ldns:1.6.2:*:*:*:*:*:*:* |
| nlnetlabs | ldns | 1.6.3 | cpe:2.3:a:nlnetlabs:ldns:1.6.3:*:*:*:*:*:*:* |
| nlnetlabs | ldns | 1.6.4 | cpe:2.3:a:nlnetlabs:ldns:1.6.4:*:*:*:*:*:*:* |
| nlnetlabs | ldns | 1.6.5 | cpe:2.3:a:nlnetlabs:ldns:1.6.5:*:*:*:*:*:*:* |
| nlnetlabs | ldns | 1.6.6 | cpe:2.3:a:nlnetlabs:ldns:1.6.6:*:*:*:*:*:*:* |
| nlnetlabs | ldns | 1.6.7 | cpe:2.3:a:nlnetlabs:ldns:1.6.7:*:*:*:*:*:*:* |
| nlnetlabs | ldns | 1.6.8 | cpe:2.3:a:nlnetlabs:ldns:1.6.8:*:*:*:*:*:*:* |
| nlnetlabs | ldns | 1.6.9 | cpe:2.3:a:nlnetlabs:ldns:1.6.9:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2014-3209
2014-11-16 01:59:03
ubuntucve
ubuntucve
CVE-2014-3209
2014-11-15 00:00:00
securityvulns
securityvulns
ldns weak permissions
2014-05-15 00:00:00
[ MDVSA-2014:085 ] ldns
2014-05-15 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : ldns (MDVSA-2014:085)
2014-05-13 00:00:00
RHEL 7 : ldns (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 6 : ldns (Unpatched Vulnerability)
2024-06-03 00:00:00
cvelist
cvelist
CVE-2014-3209
2014-11-16 01:00:00
mageia
mageia
Updated ldns package fixes CVE-2014-3209
2014-05-10 23:38:37
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0212)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-3491-1)
2017-11-23 00:00:00
prion
prion
Design/Logic Flaw
2014-11-16 01:59:00
debiancve
debiancve
CVE-2014-3209
2014-11-16 01:59:03
ubuntu
ubuntu
ldns vulnerabilities
2017-11-22 00:00:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
8.6
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVE-2014-3209