CVE-2010-1325

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
• support.novell.com/security/cve/CVE-2010-1325.html
• securityfocus.com/bid/42121
• bugzilla.novell.com/show_bug.cgi
• exchange.xforce.ibmcloud.com/vulnerabilities/61006

suse lifecycle management server のその他の脆弱性

• CVE-2011-0993低 2.1SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive informati…
• CVE-2013-3709高 7.2WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails …
• CVE-2013-7042中 4.6SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain p…
• CVE-2013-3710中 4.3SUSE Lifecycle Management Server (SLMS) before 1.3.7 does not generate a new secret key when the service starts, which allows remote attacke…