CVE-2010-4176

Publication date 7 December 2010

Last updated 24 July 2024

Ubuntu priority

High

Why this priority?

Description

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.

Read the notes from the security team

Status

Package Ubuntu Release Status
dracut 10.10 maverick
Not affected
10.04 LTS lucid Not in release
9.10 karmic Not in release
8.04 LTS hardy Not in release
6.06 LTS dapper Not in release

Notes

jdstrand

per Debian, vulnerable script not shipped

References

Other references

Access our resources on patching vulnerabilities