CVE-2013-2069

HIGH 7.2CVE-2013-2069 · Published 29/05/2013 · updated 16/06/2026

In short

CVE-2013-2069 is a HIGH (CVSS 7.2) vulnerability affecting livecd-tools (redhat).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 28.1% of all vulnerabilities.
Fix: update to 17.17, 18.16, 19.3, 13.4.4 or later.

Package	Affected versions	Patched versions
livecd-tools redhat	`≥ 17.0, < 17.17≥ 18.0, < 18.16≥ 19.0, < 19.3< 13.4.4`	`17.1718.1619.313.4.4`

Description

Red Hat livecd-tools before 13.4.4, 17.x before 17.17, 18.x before 18.16, and 19.x before 19.3, when a rootpw directive is not set in a Kickstart file, sets the root user password to empty, which allows local users to gain privileges.

References

rhn.redhat.com/errata/RHSA-2013-0849.html · Vendor Advisory
openwall.com/lists/oss-security/2013/05/23/2 · Mailing List
securityfocus.com/bid/60119 · Third Party Advisory
aws.amazon.com/security/security-bulletins/red-hat-and-other-third-party-public-amis-security-concern · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
exchange.xforce.ibmcloud.com/vulnerabilities/84488 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free