[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <20150522033100.D1D996C001A@smtpvmsrv1.mitre.org>
Date: Thu, 21 May 2015 23:31:00 -0400 (EDT)
From: cve-assign@...re.org
To: sisharma@...hat.com
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE Request for ceph-deploy copying keyring to /etc/ceph which is world readable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> http://tracker.ceph.com/issues/11694
> when using the 'ceph-deploy admin' command, the
> /etc/ceph/ceph.client.admin.keyring on the host is world-readable, and
> thus making it usable for all local users
Use CVE-2015-4053.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJVXqJTAAoJEKllVAevmvmsxswH/0dKXt6yWuoTCR+jCilII1Rv
5bWxFYYgR+TxK+wZCpbwMOfnSLv8RExtGP2pZErIami1DzKTwKQnZ0FHSN0ThWGS
iLdLYt/oCDg8Xcw67zXcZx758hnuIi6cJrX1JX4VfJz0UkTGYHqFOx1A8k/Sc+IJ
Juo5wwg1NeETLyIK74s+K7IVHKR8UAk5ltynDY2ii/KNHIoVoBAX5CwLa0XOc9x2
GGjAsaz5PK6PrlZUiP4+wxE22q6eRkQQvJ139oQfvfb2vlPUECGNTyyspeYYnFFz
NHe9vOWIWkHSEyT/WBQDsFOVIc5LfcbstBKpvzE8BG8U/DuDc/yQlkeq8bZWk1A=
=sJIJ
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
