RHSA-2012:1369
Vulnerability from csaf_redhat - Published: 2012-10-15 18:30 - Updated: 2025-11-21 17:41Summary
Red Hat Security Advisory: rhncfg security, bug fix, and enhancement update
Notes
Topic
Updated rhncfg packages that fix one security issue, two bugs, and add one
enhancement are now available for Red Hat Network Tools for Red Hat
Enterprise Linux 5 and 6; Red Hat Enterprise Linux 5.3 Long Life; and Red
Hat Enterprise Linux 5.6, 6.0, 6.1, and 6.2 Extended Update Support.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
Details
Red Hat Network Tools provide programs and libraries that allow your system
to use provisioning, monitoring, and configuration management capabilities
provided by Red Hat Network and Red Hat Network Satellite.
It was discovered that the Red Hat Network (RHN) Configuration Client
(rhncfg-client) tool set world-readable permissions on the
"/var/log/rhncfg-actions" file, used to store the output of different
rhncfg-client actions (such as diffing and verifying files). This could
possibly allow a local attacker to obtain sensitive information they would
otherwise not have access to. (CVE-2012-2679)
Note: With this update, rhncfg-client cannot create diffs of files that
are not already world-readable, and "/var/log/rhncfg-actions" can only be
read and written to by the root user.
This issue was discovered by Paul Wouters of Red Hat.
This update also fixes the following bugs:
* When the user attempted to use the "rhncfg-client get" command to
download a backup of deployed configuration files and these configuration
files contained a broken symbolic link, the command failed with an error.
This update ensures that "rhncfg-client get" no longer fails in this
scenario. (BZ#836445)
* The SYNOPSIS section of the rhn-actions-control(8) manual page has been
updated to include the "--report" command line option as expected.
(BZ#820517)
As well, this update adds the following enhancement:
* The rhncfg-manager utility now supports a new command line option,
"--selinux-context". This option can be used to upload files and
directories without setting the Security-Enhanced Linux (SELinux) context.
(BZ#770575)
All users of Red Hat Network Tools are advised to upgrade to these updated
packages, which correct these issues and add this enhancement.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated rhncfg packages that fix one security issue, two bugs, and add one\nenhancement are now available for Red Hat Network Tools for Red Hat\nEnterprise Linux 5 and 6; Red Hat Enterprise Linux 5.3 Long Life; and Red\nHat Enterprise Linux 5.6, 6.0, 6.1, and 6.2 Extended Update Support.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Network Tools provide programs and libraries that allow your system\nto use provisioning, monitoring, and configuration management capabilities\nprovided by Red Hat Network and Red Hat Network Satellite.\n\nIt was discovered that the Red Hat Network (RHN) Configuration Client\n(rhncfg-client) tool set world-readable permissions on the\n\"/var/log/rhncfg-actions\" file, used to store the output of different\nrhncfg-client actions (such as diffing and verifying files). This could\npossibly allow a local attacker to obtain sensitive information they would\notherwise not have access to. (CVE-2012-2679)\n\nNote: With this update, rhncfg-client cannot create diffs of files that\nare not already world-readable, and \"/var/log/rhncfg-actions\" can only be\nread and written to by the root user.\n\nThis issue was discovered by Paul Wouters of Red Hat.\n\nThis update also fixes the following bugs:\n\n* When the user attempted to use the \"rhncfg-client get\" command to\ndownload a backup of deployed configuration files and these configuration\nfiles contained a broken symbolic link, the command failed with an error.\nThis update ensures that \"rhncfg-client get\" no longer fails in this\nscenario. (BZ#836445)\n\n* The SYNOPSIS section of the rhn-actions-control(8) manual page has been\nupdated to include the \"--report\" command line option as expected.\n(BZ#820517)\n\nAs well, this update adds the following enhancement:\n\n* The rhncfg-manager utility now supports a new command line option,\n\"--selinux-context\". This option can be used to upload files and\ndirectories without setting the Security-Enhanced Linux (SELinux) context.\n(BZ#770575)\n\nAll users of Red Hat Network Tools are advised to upgrade to these updated\npackages, which correct these issues and add this enhancement.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:1369",
"url": "https://access.redhat.com/errata/RHSA-2012:1369"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "820517",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=820517"
},
{
"category": "external",
"summary": "825275",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=825275"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1369.json"
}
],
"title": "Red Hat Security Advisory: rhncfg security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2025-11-21T17:41:25+00:00",
"generator": {
"date": "2025-11-21T17:41:25+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2012:1369",
"initial_release_date": "2012-10-15T18:30:00+00:00",
"revision_history": [
{
"date": "2012-10-15T18:30:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-10-15T18:37:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:41:25+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHN Tools (v. 5 Client)",
"product": {
"name": "RHN Tools (v. 5 Client)",
"product_id": "5Client-RHNTools",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_rhn_tools:5"
}
}
},
{
"category": "product_name",
"name": "RHN Tools (v. 5 Server)",
"product": {
"name": "RHN Tools (v. 5 Server)",
"product_id": "5Server-RHNTools",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_rhn_tools:5"
}
}
},
{
"category": "product_name",
"name": "RHN Tools (v. 5.3.LL Server)",
"product": {
"name": "RHN Tools (v. 5.3.LL Server)",
"product_id": "5Server-RHNTools-5.3.LL",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_rhn_tools:5"
}
}
},
{
"category": "product_name",
"name": "RHN Tools (v. 5.6.z Server)",
"product": {
"name": "RHN Tools (v. 5.6.z Server)",
"product_id": "5Server-RHNTools-5.6.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_rhn_tools:5"
}
}
},
{
"category": "product_name",
"name": "RHN Tools (v. 6 Client)",
"product": {
"name": "RHN Tools (v. 6 Client)",
"product_id": "6Client-RHNTools",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_rhn_tools:6"
}
}
},
{
"category": "product_name",
"name": "RHN Tools (v. 6 ComputeNode)",
"product": {
"name": "RHN Tools (v. 6 ComputeNode)",
"product_id": "6ComputeNode-RHNTools",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_rhn_tools:6"
}
}
},
{
"category": "product_name",
"name": "RHN Tools (v. 6 Workstation)",
"product": {
"name": "RHN Tools (v. 6 Workstation)",
"product_id": "6Workstation-RHNTools",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_rhn_tools:6"
}
}
},
{
"category": "product_name",
"name": "RHN Tools (v. 6.0.z Server)",
"product": {
"name": "RHN Tools (v. 6.0.z Server)",
"product_id": "6Server-RHNTools-6.0.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_rhn_tools:6"
}
}
},
{
"category": "product_name",
"name": "RHN Tools (v. 6.1.z Server)",
"product": {
"name": "RHN Tools (v. 6.1.z Server)",
"product_id": "6Server-RHNTools-6.1.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_rhn_tools:6"
}
}
},
{
"category": "product_name",
"name": "RHN Tools (v. 6.2.z Server)",
"product": {
"name": "RHN Tools (v. 6.2.z Server)",
"product_id": "6Server-RHNTools-6.2.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_rhn_tools:6"
}
}
},
{
"category": "product_name",
"name": "RHN Tools (v. 6.3.z Server)",
"product": {
"name": "RHN Tools (v. 6.3.z Server)",
"product_id": "6Server-RHNTools-6.3.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_rhn_tools:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Network Tools"
},
{
"branches": [
{
"category": "product_version",
"name": "rhncfg-management-0:5.10.27-8.el5sat.noarch",
"product": {
"name": "rhncfg-management-0:5.10.27-8.el5sat.noarch",
"product_id": "rhncfg-management-0:5.10.27-8.el5sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhncfg-management@5.10.27-8.el5sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhncfg-client-0:5.10.27-8.el5sat.noarch",
"product": {
"name": "rhncfg-client-0:5.10.27-8.el5sat.noarch",
"product_id": "rhncfg-client-0:5.10.27-8.el5sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhncfg-client@5.10.27-8.el5sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhncfg-0:5.10.27-8.el5sat.noarch",
"product": {
"name": "rhncfg-0:5.10.27-8.el5sat.noarch",
"product_id": "rhncfg-0:5.10.27-8.el5sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhncfg@5.10.27-8.el5sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"product": {
"name": "rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"product_id": "rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhncfg-actions@5.10.27-8.el5sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"product": {
"name": "rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"product_id": "rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhncfg-actions@5.10.27-8.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhncfg-management-0:5.10.27-8.el6sat.noarch",
"product": {
"name": "rhncfg-management-0:5.10.27-8.el6sat.noarch",
"product_id": "rhncfg-management-0:5.10.27-8.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhncfg-management@5.10.27-8.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhncfg-0:5.10.27-8.el6sat.noarch",
"product": {
"name": "rhncfg-0:5.10.27-8.el6sat.noarch",
"product_id": "rhncfg-0:5.10.27-8.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhncfg@5.10.27-8.el6sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhncfg-client-0:5.10.27-8.el6sat.noarch",
"product": {
"name": "rhncfg-client-0:5.10.27-8.el6sat.noarch",
"product_id": "rhncfg-client-0:5.10.27-8.el6sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhncfg-client@5.10.27-8.el6sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "rhncfg-0:5.10.27-8.el5sat.src",
"product": {
"name": "rhncfg-0:5.10.27-8.el5sat.src",
"product_id": "rhncfg-0:5.10.27-8.el5sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhncfg@5.10.27-8.el5sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rhncfg-0:5.10.27-8.el6sat.src",
"product": {
"name": "rhncfg-0:5.10.27-8.el6sat.src",
"product_id": "rhncfg-0:5.10.27-8.el6sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhncfg@5.10.27-8.el6sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5 Client)",
"product_id": "5Client-RHNTools:rhncfg-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Client-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el5sat.src as a component of RHN Tools (v. 5 Client)",
"product_id": "5Client-RHNTools:rhncfg-0:5.10.27-8.el5sat.src"
},
"product_reference": "rhncfg-0:5.10.27-8.el5sat.src",
"relates_to_product_reference": "5Client-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-actions-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5 Client)",
"product_id": "5Client-RHNTools:rhncfg-actions-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Client-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-client-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5 Client)",
"product_id": "5Client-RHNTools:rhncfg-client-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-client-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Client-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-management-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5 Client)",
"product_id": "5Client-RHNTools:rhncfg-management-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-management-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Client-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5.3.LL Server)",
"product_id": "5Server-RHNTools-5.3.LL:rhncfg-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Server-RHNTools-5.3.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el5sat.src as a component of RHN Tools (v. 5.3.LL Server)",
"product_id": "5Server-RHNTools-5.3.LL:rhncfg-0:5.10.27-8.el5sat.src"
},
"product_reference": "rhncfg-0:5.10.27-8.el5sat.src",
"relates_to_product_reference": "5Server-RHNTools-5.3.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-actions-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5.3.LL Server)",
"product_id": "5Server-RHNTools-5.3.LL:rhncfg-actions-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Server-RHNTools-5.3.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-client-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5.3.LL Server)",
"product_id": "5Server-RHNTools-5.3.LL:rhncfg-client-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-client-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Server-RHNTools-5.3.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-management-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5.3.LL Server)",
"product_id": "5Server-RHNTools-5.3.LL:rhncfg-management-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-management-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Server-RHNTools-5.3.LL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5.6.z Server)",
"product_id": "5Server-RHNTools-5.6.z:rhncfg-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Server-RHNTools-5.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el5sat.src as a component of RHN Tools (v. 5.6.z Server)",
"product_id": "5Server-RHNTools-5.6.z:rhncfg-0:5.10.27-8.el5sat.src"
},
"product_reference": "rhncfg-0:5.10.27-8.el5sat.src",
"relates_to_product_reference": "5Server-RHNTools-5.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-actions-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5.6.z Server)",
"product_id": "5Server-RHNTools-5.6.z:rhncfg-actions-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Server-RHNTools-5.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-client-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5.6.z Server)",
"product_id": "5Server-RHNTools-5.6.z:rhncfg-client-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-client-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Server-RHNTools-5.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-management-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5.6.z Server)",
"product_id": "5Server-RHNTools-5.6.z:rhncfg-management-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-management-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Server-RHNTools-5.6.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5 Server)",
"product_id": "5Server-RHNTools:rhncfg-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Server-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el5sat.src as a component of RHN Tools (v. 5 Server)",
"product_id": "5Server-RHNTools:rhncfg-0:5.10.27-8.el5sat.src"
},
"product_reference": "rhncfg-0:5.10.27-8.el5sat.src",
"relates_to_product_reference": "5Server-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-actions-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5 Server)",
"product_id": "5Server-RHNTools:rhncfg-actions-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Server-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-client-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5 Server)",
"product_id": "5Server-RHNTools:rhncfg-client-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-client-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Server-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-management-0:5.10.27-8.el5sat.noarch as a component of RHN Tools (v. 5 Server)",
"product_id": "5Server-RHNTools:rhncfg-management-0:5.10.27-8.el5sat.noarch"
},
"product_reference": "rhncfg-management-0:5.10.27-8.el5sat.noarch",
"relates_to_product_reference": "5Server-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6 Client)",
"product_id": "6Client-RHNTools:rhncfg-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Client-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.src as a component of RHN Tools (v. 6 Client)",
"product_id": "6Client-RHNTools:rhncfg-0:5.10.27-8.el6sat.src"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.src",
"relates_to_product_reference": "6Client-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-actions-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6 Client)",
"product_id": "6Client-RHNTools:rhncfg-actions-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Client-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-client-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6 Client)",
"product_id": "6Client-RHNTools:rhncfg-client-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-client-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Client-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-management-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6 Client)",
"product_id": "6Client-RHNTools:rhncfg-management-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-management-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Client-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6 ComputeNode)",
"product_id": "6ComputeNode-RHNTools:rhncfg-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6ComputeNode-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.src as a component of RHN Tools (v. 6 ComputeNode)",
"product_id": "6ComputeNode-RHNTools:rhncfg-0:5.10.27-8.el6sat.src"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.src",
"relates_to_product_reference": "6ComputeNode-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-actions-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6 ComputeNode)",
"product_id": "6ComputeNode-RHNTools:rhncfg-actions-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6ComputeNode-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-client-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6 ComputeNode)",
"product_id": "6ComputeNode-RHNTools:rhncfg-client-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-client-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6ComputeNode-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-management-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6 ComputeNode)",
"product_id": "6ComputeNode-RHNTools:rhncfg-management-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-management-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6ComputeNode-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.0.z Server)",
"product_id": "6Server-RHNTools-6.0.Z:rhncfg-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.src as a component of RHN Tools (v. 6.0.z Server)",
"product_id": "6Server-RHNTools-6.0.Z:rhncfg-0:5.10.27-8.el6sat.src"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.src",
"relates_to_product_reference": "6Server-RHNTools-6.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-actions-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.0.z Server)",
"product_id": "6Server-RHNTools-6.0.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-client-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.0.z Server)",
"product_id": "6Server-RHNTools-6.0.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-client-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-management-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.0.z Server)",
"product_id": "6Server-RHNTools-6.0.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-management-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.1.z Server)",
"product_id": "6Server-RHNTools-6.1.Z:rhncfg-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.src as a component of RHN Tools (v. 6.1.z Server)",
"product_id": "6Server-RHNTools-6.1.Z:rhncfg-0:5.10.27-8.el6sat.src"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.src",
"relates_to_product_reference": "6Server-RHNTools-6.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-actions-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.1.z Server)",
"product_id": "6Server-RHNTools-6.1.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-client-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.1.z Server)",
"product_id": "6Server-RHNTools-6.1.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-client-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-management-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.1.z Server)",
"product_id": "6Server-RHNTools-6.1.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-management-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.2.z Server)",
"product_id": "6Server-RHNTools-6.2.Z:rhncfg-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.src as a component of RHN Tools (v. 6.2.z Server)",
"product_id": "6Server-RHNTools-6.2.Z:rhncfg-0:5.10.27-8.el6sat.src"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.src",
"relates_to_product_reference": "6Server-RHNTools-6.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-actions-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.2.z Server)",
"product_id": "6Server-RHNTools-6.2.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-client-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.2.z Server)",
"product_id": "6Server-RHNTools-6.2.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-client-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-management-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.2.z Server)",
"product_id": "6Server-RHNTools-6.2.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-management-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.3.z Server)",
"product_id": "6Server-RHNTools-6.3.Z:rhncfg-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.src as a component of RHN Tools (v. 6.3.z Server)",
"product_id": "6Server-RHNTools-6.3.Z:rhncfg-0:5.10.27-8.el6sat.src"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.src",
"relates_to_product_reference": "6Server-RHNTools-6.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-actions-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.3.z Server)",
"product_id": "6Server-RHNTools-6.3.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-client-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.3.z Server)",
"product_id": "6Server-RHNTools-6.3.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-client-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-management-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6.3.z Server)",
"product_id": "6Server-RHNTools-6.3.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-management-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Server-RHNTools-6.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6 Workstation)",
"product_id": "6Workstation-RHNTools:rhncfg-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Workstation-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-0:5.10.27-8.el6sat.src as a component of RHN Tools (v. 6 Workstation)",
"product_id": "6Workstation-RHNTools:rhncfg-0:5.10.27-8.el6sat.src"
},
"product_reference": "rhncfg-0:5.10.27-8.el6sat.src",
"relates_to_product_reference": "6Workstation-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-actions-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6 Workstation)",
"product_id": "6Workstation-RHNTools:rhncfg-actions-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Workstation-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-client-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6 Workstation)",
"product_id": "6Workstation-RHNTools:rhncfg-client-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-client-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Workstation-RHNTools"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhncfg-management-0:5.10.27-8.el6sat.noarch as a component of RHN Tools (v. 6 Workstation)",
"product_id": "6Workstation-RHNTools:rhncfg-management-0:5.10.27-8.el6sat.noarch"
},
"product_reference": "rhncfg-management-0:5.10.27-8.el6sat.noarch",
"relates_to_product_reference": "6Workstation-RHNTools"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Paul Wouters"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2012-2679",
"discovery_date": "2012-05-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "825275"
}
],
"notes": [
{
"category": "description",
"text": "Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-readable) for /var/log/rhncfg-actions, which allows local users to obtain sensitive information about the rhncfg-client actions by reading the file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rhncfg: Insecure permissions used for /var/log/rhncfg-actions file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-RHNTools:rhncfg-0:5.10.27-8.el5sat.noarch",
"5Client-RHNTools:rhncfg-0:5.10.27-8.el5sat.src",
"5Client-RHNTools:rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"5Client-RHNTools:rhncfg-client-0:5.10.27-8.el5sat.noarch",
"5Client-RHNTools:rhncfg-management-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.3.LL:rhncfg-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.3.LL:rhncfg-0:5.10.27-8.el5sat.src",
"5Server-RHNTools-5.3.LL:rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.3.LL:rhncfg-client-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.3.LL:rhncfg-management-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.6.z:rhncfg-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.6.z:rhncfg-0:5.10.27-8.el5sat.src",
"5Server-RHNTools-5.6.z:rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.6.z:rhncfg-client-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.6.z:rhncfg-management-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools:rhncfg-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools:rhncfg-0:5.10.27-8.el5sat.src",
"5Server-RHNTools:rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools:rhncfg-client-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools:rhncfg-management-0:5.10.27-8.el5sat.noarch",
"6Client-RHNTools:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Client-RHNTools:rhncfg-0:5.10.27-8.el6sat.src",
"6Client-RHNTools:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Client-RHNTools:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Client-RHNTools:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6ComputeNode-RHNTools:rhncfg-0:5.10.27-8.el6sat.noarch",
"6ComputeNode-RHNTools:rhncfg-0:5.10.27-8.el6sat.src",
"6ComputeNode-RHNTools:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6ComputeNode-RHNTools:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6ComputeNode-RHNTools:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.0.Z:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.0.Z:rhncfg-0:5.10.27-8.el6sat.src",
"6Server-RHNTools-6.0.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.0.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.0.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.1.Z:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.1.Z:rhncfg-0:5.10.27-8.el6sat.src",
"6Server-RHNTools-6.1.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.1.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.1.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.2.Z:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.2.Z:rhncfg-0:5.10.27-8.el6sat.src",
"6Server-RHNTools-6.2.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.2.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.2.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.3.Z:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.3.Z:rhncfg-0:5.10.27-8.el6sat.src",
"6Server-RHNTools-6.3.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.3.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.3.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Workstation-RHNTools:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Workstation-RHNTools:rhncfg-0:5.10.27-8.el6sat.src",
"6Workstation-RHNTools:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Workstation-RHNTools:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Workstation-RHNTools:rhncfg-management-0:5.10.27-8.el6sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-2679"
},
{
"category": "external",
"summary": "RHBZ#825275",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=825275"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-2679",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-2679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2679"
}
],
"release_date": "2012-06-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-10-15T18:30:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-RHNTools:rhncfg-0:5.10.27-8.el5sat.noarch",
"5Client-RHNTools:rhncfg-0:5.10.27-8.el5sat.src",
"5Client-RHNTools:rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"5Client-RHNTools:rhncfg-client-0:5.10.27-8.el5sat.noarch",
"5Client-RHNTools:rhncfg-management-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.3.LL:rhncfg-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.3.LL:rhncfg-0:5.10.27-8.el5sat.src",
"5Server-RHNTools-5.3.LL:rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.3.LL:rhncfg-client-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.3.LL:rhncfg-management-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.6.z:rhncfg-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.6.z:rhncfg-0:5.10.27-8.el5sat.src",
"5Server-RHNTools-5.6.z:rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.6.z:rhncfg-client-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.6.z:rhncfg-management-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools:rhncfg-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools:rhncfg-0:5.10.27-8.el5sat.src",
"5Server-RHNTools:rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools:rhncfg-client-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools:rhncfg-management-0:5.10.27-8.el5sat.noarch",
"6Client-RHNTools:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Client-RHNTools:rhncfg-0:5.10.27-8.el6sat.src",
"6Client-RHNTools:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Client-RHNTools:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Client-RHNTools:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6ComputeNode-RHNTools:rhncfg-0:5.10.27-8.el6sat.noarch",
"6ComputeNode-RHNTools:rhncfg-0:5.10.27-8.el6sat.src",
"6ComputeNode-RHNTools:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6ComputeNode-RHNTools:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6ComputeNode-RHNTools:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.0.Z:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.0.Z:rhncfg-0:5.10.27-8.el6sat.src",
"6Server-RHNTools-6.0.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.0.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.0.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.1.Z:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.1.Z:rhncfg-0:5.10.27-8.el6sat.src",
"6Server-RHNTools-6.1.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.1.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.1.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.2.Z:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.2.Z:rhncfg-0:5.10.27-8.el6sat.src",
"6Server-RHNTools-6.2.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.2.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.2.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.3.Z:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.3.Z:rhncfg-0:5.10.27-8.el6sat.src",
"6Server-RHNTools-6.3.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.3.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.3.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Workstation-RHNTools:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Workstation-RHNTools:rhncfg-0:5.10.27-8.el6sat.src",
"6Workstation-RHNTools:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Workstation-RHNTools:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Workstation-RHNTools:rhncfg-management-0:5.10.27-8.el6sat.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:1369"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"products": [
"5Client-RHNTools:rhncfg-0:5.10.27-8.el5sat.noarch",
"5Client-RHNTools:rhncfg-0:5.10.27-8.el5sat.src",
"5Client-RHNTools:rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"5Client-RHNTools:rhncfg-client-0:5.10.27-8.el5sat.noarch",
"5Client-RHNTools:rhncfg-management-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.3.LL:rhncfg-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.3.LL:rhncfg-0:5.10.27-8.el5sat.src",
"5Server-RHNTools-5.3.LL:rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.3.LL:rhncfg-client-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.3.LL:rhncfg-management-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.6.z:rhncfg-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.6.z:rhncfg-0:5.10.27-8.el5sat.src",
"5Server-RHNTools-5.6.z:rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.6.z:rhncfg-client-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools-5.6.z:rhncfg-management-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools:rhncfg-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools:rhncfg-0:5.10.27-8.el5sat.src",
"5Server-RHNTools:rhncfg-actions-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools:rhncfg-client-0:5.10.27-8.el5sat.noarch",
"5Server-RHNTools:rhncfg-management-0:5.10.27-8.el5sat.noarch",
"6Client-RHNTools:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Client-RHNTools:rhncfg-0:5.10.27-8.el6sat.src",
"6Client-RHNTools:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Client-RHNTools:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Client-RHNTools:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6ComputeNode-RHNTools:rhncfg-0:5.10.27-8.el6sat.noarch",
"6ComputeNode-RHNTools:rhncfg-0:5.10.27-8.el6sat.src",
"6ComputeNode-RHNTools:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6ComputeNode-RHNTools:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6ComputeNode-RHNTools:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.0.Z:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.0.Z:rhncfg-0:5.10.27-8.el6sat.src",
"6Server-RHNTools-6.0.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.0.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.0.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.1.Z:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.1.Z:rhncfg-0:5.10.27-8.el6sat.src",
"6Server-RHNTools-6.1.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.1.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.1.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.2.Z:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.2.Z:rhncfg-0:5.10.27-8.el6sat.src",
"6Server-RHNTools-6.2.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.2.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.2.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.3.Z:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.3.Z:rhncfg-0:5.10.27-8.el6sat.src",
"6Server-RHNTools-6.3.Z:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.3.Z:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Server-RHNTools-6.3.Z:rhncfg-management-0:5.10.27-8.el6sat.noarch",
"6Workstation-RHNTools:rhncfg-0:5.10.27-8.el6sat.noarch",
"6Workstation-RHNTools:rhncfg-0:5.10.27-8.el6sat.src",
"6Workstation-RHNTools:rhncfg-actions-0:5.10.27-8.el6sat.noarch",
"6Workstation-RHNTools:rhncfg-client-0:5.10.27-8.el6sat.noarch",
"6Workstation-RHNTools:rhncfg-management-0:5.10.27-8.el6sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rhncfg: Insecure permissions used for /var/log/rhncfg-actions file"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…