insecure permissions on files containing confidential data
The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confidential data.
References
- https://bugzilla.suse.com/show_bug.cgi?id=783195 x_refsource_CONFIRM
- https://www.suse.com/security/cve/CVE-2012-0433/ x_refsource_CONFIRM
- https://bugzilla.suse.com/show_bug.cgi?id=783195 x_transferred x_refsource_CONFIRM
- https://www.suse.com/security/cve/CVE-2012-0433/ x_transferred x_refsource_CONFIRM
- https://bugzilla.suse.com/show_bug.cgi?id=783195 x_refsource_CONFIRM
- https://www.suse.com/security/cve/CVE-2012-0433/ x_refsource_CONFIRM
- https://bugzilla.suse.com/show_bug.cgi?id=783195 x_transferred x_refsource_CONFIRM
- https://www.suse.com/security/cve/CVE-2012-0433/ x_transferred x_refsource_CONFIRM
- https://www.suse.com/security/cve/CVE-2012-0433/ x_refsource_CONFIRM
- https://bugzilla.suse.com/show_bug.cgi?id=783195 x_refsource_CONFIRM
- https://bugzilla.suse.com/show_bug.cgi?id=783195 x_transferred x_refsource_CONFIRM
- https://www.suse.com/security/cve/CVE-2012-0433/ x_transferred x_refsource_CONFIRM
Affected products
crowbar
- <2012-10-02
Matching in nixpkgs
Package maintainers
-
@Pamplemousse Xavier Maso <xav.maso@gmail.com>
-
@sternenseemann Lukas Epple <sternenseemann@systemli.org>