The RedCarpet /etc/ximian/rcd.conf configuration file in Novell Linux Desktop 9 and SUSE SLES 9 has world-readable permissions, which allows attackers to obtain the rc (RedCarpet) password.
Link | Tags |
---|---|
http://secunia.com/advisories/20396 | third party advisory |
http://www.securityfocus.com/archive/1/435491/100/0/threaded | vendor advisory |