CVE-2012-2314

Published: Jul 3, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

The bootloader configuration module (pyanaconda/bootloader.py) in Anaconda uses 755 permissions for /etc/grub.d, which allows local users to obtain password hashes and conduct brute force password guessing attacks.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

FEDORA-2012-7579

vendor-advisory

http://git.fedorahosted.org/git/?p=anaconda.git%3Ba=commit%3Bh=03ef13b625cc06873a924e0610340f8489fd92df

[oss-security] 20120504 CVE Request -- anaconda: Weak permissions by writing password configuration file in bootloader configuration module

mailing-list

https://bugzilla.redhat.com/show_bug.cgi?id=819031

53486

vdb-entry

[oss-security] 20120504 Re: CVE Request -- anaconda: Weak permissions by writing password configuration file in bootloader configuration module

mailing-list

[oss-security] 20240116 CVE-2023-4001: a password bypass vulnerability in the downstream GRUB boot manager

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2012-2314

Description

Affected Products

References