CVE-2013-2069 in Red Hat livecd-tools
Summary
Red Hat livecd-tools before 13.4.4, 17.x before 17.17, 18.x before 18.16, and 19.x before 19.3, when a rootpw directive is not set in a Kickstart file, sets the root user password to empty, which allows local users to gain privileges.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
02/19/2013
Disclosure
05/28/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 64210 | Red Hat livecd-tools access control | 264 | Not defined | Official fix | CVE-2013-2069 |