CVE-2014-3209

The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.openwall.com/lists/oss-security/2014/05/03/2
http://www.openwall.com/lists/oss-security/2014/05/05/4
http://www.securityfocus.com/bid/67200
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746758
https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=573

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:nlnetlabs:ldns:1.6.0:::::::*
	cpe:2.3:a:nlnetlabs:ldns:1.6.1:::::::*
	cpe:2.3:a:nlnetlabs:ldns:1.6.2:::::::*
	cpe:2.3:a:nlnetlabs:ldns:1.6.3:::::::*
	cpe:2.3:a:nlnetlabs:ldns:1.6.4:::::::*
	cpe:2.3:a:nlnetlabs:ldns:1.6.5:::::::*
	cpe:2.3:a:nlnetlabs:ldns:1.6.6:::::::*
	cpe:2.3:a:nlnetlabs:ldns:1.6.7:::::::*
	cpe:2.3:a:nlnetlabs:ldns:1.6.8:::::::*
	cpe:2.3:a:nlnetlabs:ldns:1.6.9:::::::*
	cpe:2.3:a:nlnetlabs:ldns:1.6.10:::::::*
	cpe:2.3:a:nlnetlabs:ldns:1.6.11:::::::*

History

No history.

Information

Published : 2014-11-16 01:59

Updated : 2014-11-17 17:06

NVD link : CVE-2014-3209

Mitre link : CVE-2014-3209

CVE.ORG link : CVE-2014-3209

JSON object : View

Products Affected

nlnetlabs

ldns

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2014-3209", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-11-16T01:59:03.163", "references": [{"url": "http://www.openwall.com/lists/oss-security/2014/05/03/2", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2014/05/05/4", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/67200", "source": "secalert@redhat.com"}, {"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746758", "source": "secalert@redhat.com"}, {"url": "https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=573", "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file."}, {"lang": "es", "value": "La herramienta Idns-keygen en Idns 1.6.x utiliza la umask actual para configurar los privilegios de la clave privada, lo que podr\u00eda permitir a usuarios locales obtener la clave privada mediante la lectura del archivo."}], "lastModified": "2014-11-17T17:06:37.827", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F2C75EA-303D-4A6B-9D29-027F4113AC66"}, {"criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D538E205-514C-4F3B-A321-6C12DFE818C6"}, {"criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB72815C-BD06-4D00-A56A-55758ADC9422"}, {"criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A734953E-97F4-4E59-BDEA-68B0F762C5D6"}, {"criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C11E750-99FB-4CF6-AE58-35BF90010C88"}, {"criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "544526A4-1581-49C0-8725-369CEF426937"}, {"criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F850CB5B-66A3-4DCD-AF3D-4EC4E99A3301"}, {"criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F144E4B-73E6-456E-8FDE-57AB68A27CEE"}, {"criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E343A1CE-D4C9-4A04-B5C6-604447CC22F4"}, {"criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "166CA872-3BA7-41C4-909B-F556EF947866"}, {"criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50A33BD2-638D-4B50-A194-BC0CA0457B9E"}, {"criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C59AB101-32DD-426E-89EC-8BBC31F4D67D"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}