Fedora 'Dracut' Package Information Disclosure Vulnerability

Bugtraq ID:	55713
Class:	Design Error
CVE:	CVE-2012-4453
Remote:	No
Local:	Yes
Published:	Sep 21 2012 12:00AM
Updated:	Apr 13 2015 09:42PM
Credit:	Peter Jones
Vulnerable:	Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Dracut 0 + Redhat Linux 6.2 E sparc + Redhat Linux 6.2 E i386 + Redhat Linux 6.2 E alpha + Redhat Linux 6.2 sparc + Redhat Linux 6.2 i386 + Redhat Linux 6.2 alpha Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Avaya one-X Client Enablement Services 6.2 Avaya IP Office Server Edition 9.0 Avaya IP Office Server Edition 8.1 Avaya IP Office Application Server 9.0 Avaya CMS r17 Avaya Aura Session Manager 6.3.1 Avaya Aura Session Manager 6.3 Avaya Aura Experience Portal 6.0.2 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Experience Portal 6.0.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Experience Portal 6.0 SP2 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Experience Portal 6.0 SP1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Experience Portal 6.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Collaboration Environment 2.0
Not Vulnerable:

Fedora 'Dracut' Package Information Disclosure Vulnerability

The Fedora 'Dracut' package is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to obtain sensitive information that may aid in further attacks.

Fedora 'Dracut' Package Information Disclosure Vulnerability

Attackers require local interactive access to an affected computer to exploit this issue.

Fedora 'Dracut' Package Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.

Fedora 'Dracut' Package Information Disclosure Vulnerability

References:

• Dracut Homepage (Fedora)
  
• Fedora Homepage (RedHat)
  
• Bug 859448 - (CVE-2012-4453) CVE-2012-4453 dracut: Creates initramfs images with (Red Hat)
  
• dracut security, bug fix, and enhancement update (RHSA-2013-1674) (Avaya)