Unscored severity · published Aug 17, 2010
CVE-2010-2241
The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Directory Server · Redhat
8.0; 8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2241
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2241
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2010-0590.html
Vendor Advisory
http://secunia.com/advisories/40811
www.osvdb.org
http://www.osvdb.org/66962
www.securitytracker.com
http://www.securitytracker.com/id?1024281
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=608032
More from Directory Server
7.5
CVE-2026-11770
389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check
7.5
CVE-2026-15722
389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing
7.5
CVE-2026-11788
389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser
7.5
CVE-2026-9064
389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)
7.5
CVE-2022-1949
An access control bypass vulnerability found in 389-ds-base