CVE-2012-0421 | BDVDB-2026-51405 Detail

Description#

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00001.html
https://bugzilla.novell.com/771335

Exploit#

No public exploit known

History#

Version 12012-08-08Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.