Description
plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/45046 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051755.html ↗
- http://secunia.com/advisories/42342 ↗
- http://secunia.com/advisories/42451 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051418.html ↗
- http://www.vupen.com/english/advisories/2010/3110 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=654489 ↗
- http://www.vupen.com/english/advisories/2010/3062 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=654935 ↗