Description
The RedCarpet /etc/ximian/rcd.conf configuration file in Novell Linux Desktop 9 and SUSE SLES 9 has world-readable permissions, which allows attackers to obtain the rc (RedCarpet) password.
References
- 20396 third-party-advisory
- SUSE-SA:2006:029 vendor-advisory