dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
CVE-2012-4453 (dracut, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, fedora)
Leave a reply