CVE-2007-5827 iSCSI Enterprise Target (iscsitarget) 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords.
LowCVSS 2.1
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
iSCSI Enterprise Target (iscsitarget) 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iscsitarget | = 0.4.15 | No fix listed |
References
- bugs.debian.org
- 42037 vdb-entry
- 27483 third-party-advisory vendor-advisory
- 26299 vdb-entry
- iscsi-etcietdconf-information-disclosure(38228) vdb-entry