Computer Security
[EN] securityvulns.ru no-pyccku


ldns weak permissions
Published:15.05.2014
Source:
SecurityVulns ID:13774
Type:local
Threat Level:
4/10
Description:ldns-keygen can create world-readable private key file.
Affected:LDNS : ldns 1.6
CVE:CVE-2014-3209 (The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file.)
Original documentdocumentMANDRIVA, [ MDVSA-2014:085 ] ldns (15.05.2014)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod