Unscored CVE-2002-0849 EUVD-2002-0841GHSA-gx6p-6456-g3mr

Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat …

Published Aug 10, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password.

References

20020808 iDEFENSE Security Advisory: iSCSI Default Configuration File Settings mailing-list
linux-iscsi-conf-insecure(9792) vdb-entry
20020808 Re: [VulnWatch] iDEFENSE Security Advisory: iSCSI Default Configuration File Settings mailing-list
5423 vdb-entry