|
|
Info |
Last Modified |
| 7 months ago |
|
|
|
|
Description |
KAME contains a flaw related to the default directory that many of its daemons write dump files and trace files to, which may allow an attacker to access sensitive system information, or possibly to modify that data. The bgpd, hroute6d, pim6dd, pim6sd, route6d, and rtsold daemons used the world-writeable /var/tmp directory for dump and trace files. No further details have been provided.
|
|
Classification |
Location:
Local Access Required
Attack Type:
Unknown
Impact:
Unknown
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version 1.345 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by applying the vendor-supplied patch.
|
|
Products |
|
KAME
 |
1.344 |
|
|
|
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
