CVE-2010-4176: Medium severity Dracut Project Dracut vulnerability
plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.
Other sources
Tavis Ormandy reported that /dev/systty in Fedora has insecure permissions (0644 instead of 0600 or 0640). This could allow a remote user logged into the system to snoop on the terminal of any user logged in on tty0.
On Red Hat Enterprise Linux 5, /dev/systty is mode 0600, and on Red Hat Enterprise Linux 6, /dev/systty is a symlink to /dev/tty0 which is mode 0620. So this flaw only affects Fedora.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4176?
The severity of CVE-2010-4176 is considered moderate due to the potential exposure of sensitive terminal data.
How do I fix CVE-2010-4176?
To fix CVE-2010-4176, update to the latest version of Dracut and Udev that addresses the permissions issue for the /dev/systty device file.
Who discovered CVE-2010-4176?
CVE-2010-4176 was reported by security researcher Tavis Ormandy.
Which versions of Fedora are affected by CVE-2010-4176?
CVE-2010-4176 affects Fedora 13 and Fedora 14.
What does CVE-2010-4176 affect?
CVE-2010-4176 affects the permission settings of the /dev/systty device file, allowing potential unauthorized access to terminal data.