OSVDB ID: 17620 Title: Dominion SX /etc/shadow Permission Weakness Hashed Password Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Dominion SX contains a flaw that may lead to an unauthorized information disclosure. The issue is due to the /etc/shadow file having world-readable permissions by default, which will disclose the root user's password hash resulting in a loss of confidentiality. |
Classification |
Location:
Local Access Required
Attack Type: Information Disclosure Impact: Loss of Confidentiality Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Raritan has released a patch to address this vulnerability. |
Products |
|
References |
|
Credit |
|