Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
YaST2 network 安全漏洞
Vulnerability Description
Novell YaST（Yet another Setup Tool）是美国Novell公司的一套以RPM为基础的openSUSE和SUSE Linux Enterprise操作系统的安装与配置工具。该工具可配置系统的硬件、网络、服务等。YaST2 network是其中的一个管理网络配置的包。 YaST2 network中存在安全漏洞，该漏洞源于程序为创建的文件分配了全局可读取权限。本地攻击者可利用该漏洞读取网络配置文件中的敏感信息（例如：无线网络密码）。
CVSS Information
N/A
Vulnerability Type
N/A