The RedCarpet /etc/ximian/rcd.conf configuration file in Novell Linux Desktop 9 and SUSE SLES 9 has world-readable permissions, which allows attackers to obtain the rc (RedCarpet) password.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Suse_linux | Suse | 9.0 (including) | 9.0 (including) |
References