CVE-2004-1340: Low severity Debian Debian Linux vulnerability
Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pamradiusauth.conf set to be world-readable, which allows local users to obtain sensitive information.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1340?
CVE-2004-1340 is classified as a medium severity vulnerability that allows local users to access sensitive information due to improper file permissions.
How do I fix CVE-2004-1340?
To fix CVE-2004-1340, set the permissions of pam_radius_auth.conf to restrict access and ensure it is not world-readable.
Which versions of Debian are affected by CVE-2004-1340?
CVE-2004-1340 affects Debian GNU/Linux 3.0 across various architectures including arm, m68k, ia-32, mips, ppc, and others.
What kind of sensitive information can be exposed by CVE-2004-1340?
CVE-2004-1340 can expose authentication credentials stored in the world-readable pam_radius_auth.conf file.
What are the potential impacts of CVE-2004-1340?
The potential impacts of CVE-2004-1340 include unauthorized access to sensitive system information and compromised user accounts.