CVE-2013-2069

Published: May 29, 2013Modified: Apr 29, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Red Hat livecd-tools before 13.4.4, 17.x before 17.17, 18.x before 18.16, and 19.x before 19.3, when a rootpw directive is not set in a Kickstart file, sets the root user password to empty, which allows local users to gain privileges.

Affected (4)

Products: Redhat: Livecd Tools

Redhat

1 product

Livecd Tools

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Livecd Tools	Before 13.4.4
Redhat Livecd Tools	From 17.0 to 17.17
Redhat Livecd Tools	From 18.0 to 18.16
Redhat Livecd Tools	From 19.0 to 19.3

Related CWEs

CWE-264

References (12)

http://rhn.redhat.com/errata/RHSA-2013-0849.html

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2013/05/23/2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/60119

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://aws.amazon.com/security/security-bulletins/red-hat-and-other-third-party-public-amis-security-concern/

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=964299

Source: secalert@redhat.com

Issue TrackingVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/84488

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://rhn.redhat.com/errata/RHSA-2013-0849.html