CVE Vulnerabilities

CVE-2012-2389

Published: Jun 21, 2012 | Modified: Apr 19, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
LOW

hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might allow local users to obtain sensitive information such as credentials.

Affected Software

Name Vendor Start Version End Version
Hostapd W1.fi 0.7.3 (including) 0.7.3 (including)
Hostapd Ubuntu hardy *
Hostapd Ubuntu lucid *
Hostapd Ubuntu natty *
Hostapd Ubuntu oneiric *
Hostapd Ubuntu precise *

References