NetSight
medium5.5

CVE-2012-6136

tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.

Impact

tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.

Affected products

VendorProductAffected versions
RedhatTuned
Version 2.10.0
FedoraprojectFedora
Version 17
RedhatEnterprise Linux
Version 6.0
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Workstation
Version 6.0
DebianDebian Linux
Version 10.0

Weakness classification

References