CVE-2014-3209 | BDVDB-2026-66210 Detail

Description#

The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2014/05/03/2
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746758
https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=573
http://www.openwall.com/lists/oss-security/2014/05/05/4
http://www.securityfocus.com/bid/67200

Exploit#

No public exploit known

History#

Version 12014-11-16Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.