Skip to content

CVE-2011-3196 The setup script in Domain Technologie Control (DTC) before 0.34.1 uses world-readable permissions for /etc/apache2/apache2.conf, which allows local users to obtain the dtcdaemons MySQL password by re...

LowCVSS 2.1 EPSS 0.34%
Published
Updated
Exploit status
No public exploit known

Description

The setup script in Domain Technologie Control (DTC) before 0.34.1 uses world-readable permissions for /etc/apache2/apache2.conf, which allows local users to obtain the dtcdaemons MySQL password by reading the file.

Affected products

ProductAffected versionsFixed in
gplhost domain technologie control <= 0.32.11 No fix listed
gplhost domain technologie control = 0.24.6 No fix listed
gplhost domain technologie control = 0.25.1 No fix listed
gplhost domain technologie control = 0.25.2 No fix listed
gplhost domain technologie control = 0.25.3 No fix listed
gplhost domain technologie control = 0.26.7 No fix listed
gplhost domain technologie control = 0.26.8 No fix listed
gplhost domain technologie control = 0.26.9 No fix listed
gplhost domain technologie control = 0.27.3 No fix listed
gplhost domain technologie control = 0.28.2 No fix listed
gplhost domain technologie control = 0.28.3 No fix listed
gplhost domain technologie control = 0.28.4 No fix listed
gplhost domain technologie control = 0.28.6 No fix listed
gplhost domain technologie control = 0.28.9 No fix listed
gplhost domain technologie control = 0.28.10 No fix listed
gplhost domain technologie control = 0.29.1 No fix listed
gplhost domain technologie control = 0.29.6 No fix listed
gplhost domain technologie control = 0.29.8 No fix listed
gplhost domain technologie control = 0.29.10 No fix listed
gplhost domain technologie control = 0.29.14 No fix listed
gplhost domain technologie control = 0.29.15 No fix listed
gplhost domain technologie control = 0.29.16 No fix listed
gplhost domain technologie control = 0.29.17 No fix listed
gplhost domain technologie control = 0.30.6 No fix listed
gplhost domain technologie control = 0.30.8 No fix listed
Show 10 more
ProductAffected versionsFixed in
gplhost domain technologie control = 0.30.10 No fix listed
gplhost domain technologie control = 0.30.18 No fix listed
gplhost domain technologie control = 0.30.20 No fix listed
gplhost domain technologie control = 0.32.1 No fix listed
gplhost domain technologie control = 0.32.2 No fix listed
gplhost domain technologie control = 0.32.3 No fix listed
gplhost domain technologie control = 0.32.4 No fix listed
gplhost domain technologie control = 0.32.5 No fix listed
gplhost domain technologie control = 0.32.6 No fix listed
gplhost domain technologie control = 0.32.7 No fix listed

References