Design/Logic Flaw

2006-06-0110:02:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.9%

JSON

The RedCarpet /etc/ximian/rcd.conf configuration file in Novell Linux Desktop 9 and SUSE SLES 9 has world-readable permissions, which allows attackers to obtain the rc (RedCarpet) password.

CPENameOperatorVersion
suse_linuxeq9.0 enterprise-server
suse_linuxeq9.0

CPE	Name	Operator	Version
	suse_linux	eq	9.0 enterprise-server
	suse_linux	eq	9.0

References

secunia.com/advisories/20396

www.securityfocus.com/archive/1/435491/100/0/threaded