Unscored severity · published Dec 18, 2007
CVE-2007-6283
Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CE
Centos · Centos
5 · source: NVD
EL
Enterprise Linux · Redhat
5.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
5.0 · source: NVD
EL
Enterprise Linux For Ibm Z Systems · Redhat
5.0_s390x · source: NVD
EL
Enterprise Linux For Power Big Endian · Redhat
5.0 · source: NVD
EL
Enterprise Linux Server · Redhat
5.0 · source: NVD
EL
Enterprise Linux Workstation · Redhat
5.0 · source: NVD
FC
Fedora Core · Fedoraproject
All versions, or not specified · source: NVD
LI
Linux · Oracle
5.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6283
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6283
Third Party Advisory
http://secunia.com/advisories/28180
Third Party Advisory
http://secunia.com/advisories/30313
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2008-0300.html
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-6283
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9977
Vendor Advisory
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00587.html
More from Centos
7.8
CVE-2017-1000253
Linux Kernel PIE Stack Buffer Corruption Vulnerability
7.8
CVE-2020-5291
Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make…
–
CVE-2011-4144
Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 before P02 allows local users to obtain "highest super user…