Threat level definition
Search:
Home
Bugtraq
Vulnerabilities
Mailing Lists
Jobs
Tools
Beta Programs
News
Infocus
Foundations
Microsoft
Unix
IDS
Incidents
Virus
Pen-Test
Firewalls
Columnists
Mailing Lists
Newsletters
Bugtraq
Focus on IDS
Focus on Linux
Focus on Microsoft
Forensics
Pen-test
Security Basics
Vuln Dev
Vulnerabilities
Jobs
Job Opportunities
Resumes
Job Seekers
Employers
Tools
RSS
News
Vulns
Security Research
BugTraq
Back to list
|
Post reply
insecure user account lam-runtime-7.0.6-2mdk rpm
Apr 28 2005 09:34AM
Scott Grayban (sgrayban borgnet us)
Serverity: HIGH
I found a bug when lam-runtime-7.0.6-2mdk is installed it creates a new user/group with insecure permissions.
BUG:
user "mpi" is created without a password which can be used to compromise a system.
# rpm -qf /var/lib/mpi/test_mpi.lam
lam-runtime-7.0.6-2mdk
FIX:
Either lock the account, delete the directory or remove the rpm package.
Vendor notified: 04.27.2005 19:01
[ reply ]
Privacy Statement
Copyright 2009, SecurityFocus
Serverity: HIGH
I found a bug when lam-runtime-7.0.6-2mdk is installed it creates a new user/group with insecure permissions.
BUG:
user "mpi" is created without a password which can be used to compromise a system.
# rpm -qf /var/lib/mpi/test_mpi.lam
lam-runtime-7.0.6-2mdk
FIX:
Either lock the account, delete the directory or remove the rpm package.
Vendor notified: 04.27.2005 19:01
[ reply ]