CVE-2010-2241

Published: Aug 17, 2010Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts.

Affected (2)

Products: Redhat: Directory Server

1 product

Directory Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Directory Server	Version 8.0
Redhat Directory Server	Version 8.1

Related CWEs

References (10)

http://rhn.redhat.com/errata/RHSA-2010-0590.html

Source: secalert@redhat.com

http://secunia.com/advisories/40811

Source: secalert@redhat.com

Vendor Advisory

http://www.osvdb.org/66962

Source: secalert@redhat.com

http://www.securitytracker.com/id?1024281

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=608032

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2010-0590.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/40811

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/66962

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1024281

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=608032

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.