Lucene search
PRIOn knowledge basePRION:CVE-2015-1415HistoryApr 10, 2015 - 3:00 p.m.
Design/Logic Flaw
2015-04-1015:00:00
PRIOn knowledge base
www.prio-n.com
The bsdinstall installer in FreeBSD 10.x before 10.1 p9, when configuring full disk encrypted ZFS, uses world-readable permissions for the GELI keyfile (/boot/encryption.key), which allows local users to obtain sensitive key information by reading the file.
Related
securityvulns
securityvulns
FreeBSD 10.x ZFS encryption.key disclosure (CVE-2015-1415)
2015-04-08 00:00:00
FreeBSD Security Advisory FreeBSD-SA-15:08.bsdinstall
2015-04-08 00:00:00
FreeBSD weak permissions
2015-04-08 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:08.bsdinstall
2015-04-07 00:00:00
packetstorm
packetstorm
FreeBSD 10.x ZFS encryption.key Disclosure
2015-04-08 00:00:00
cvelist
cvelist
CVE-2015-1415
2015-04-10 14:00:00
nvd
nvd
CVE-2015-1415
2015-04-10 15:00:00
cve
cve
CVE-2015-1415
2015-04-10 15:00:00
nessus
nessus
freebsd
freebsd
FreeBSD -- Insecure default GELI keyfile permissions
2015-04-07 00:00:00