CVE-2010-4176 plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from t...
MediumCVSS 4.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dracut project dracut | All versions | No fix listed |
| udev project udev | All versions | No fix listed |
References
- FEDORA-2010-17912 mailing-list third-party-advisory vendor-advisory
- FEDORA-2010-17930 mailing-list third-party-advisory vendor-advisory
- 42342 not-applicable third-party-advisory
- 42451 not-applicable third-party-advisory
- 45046 third-party-advisory vdb-entry
- ADV-2010-3062 permissions-required vdb-entry
- ADV-2010-3110 permissions-required vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- Debian Security Tracker CVE-2010-4176 vendor-advisory