CVE-2008-1383

Summary

The docert function in ssl-cert.eclass, when used by src_compile or src_install on Gentoo Linux, stores the SSL key in a binpkg, which allows local users to extract the key from the binpkg, and causes multiple systems that use this binpkg to have the same SSL key and certificate.

Technical Details

CVSSv2 Score:

1.9

CWE ID:

CWE-310

Published Date:

Tuesday 18th of March 2008

Modified Date:

Tuesday 8th of August 2017

CVSSv2 Score:
  • Access Vector: Local
  • Access Complexity: Medium
  • Authentication Required: None
  • Confidentiality Impact: Partial
  • Integrity Impact: None
  • Availability Impact: None
Common Platform Enumeration (CPE) Affected: Common Platform Enumeration (CPE) List:

Reference: Find your Vulnerabilities:

Find out if you have vulnerabilities exposing you to hackers and malware: Download Mageni's Free Edition

Keyword Search

Search CVEs, Products and Vendors.

Don't pay for a vulnerability scanning and management platform. This one is free.

Mageni provides a free vulnerability scanning and management platform which helps you need to find, prioritize, remediate and manage your vulnerabilities.