[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-3634-1 redis -- redis

ID: oval:org.secpod.oval:def:602574Date: (C)2016-08-09   (M)2023-04-17
Class: PATCHFamily: unix




It was discovered that redis, a persistent key-value database, did not properly protect redis-cli history files: they were created by default with world-readable permissions. Users and systems administrators may want to proactively change permissions on existing ~/rediscli_history files, instead of waiting for the updated redis-cli to do so the next time it is run.

Platform:
Debian 8.x
Product:
redis-server
Reference:
DSA-3634-1
CVE-2013-7458
CVE    1
CVE-2013-7458
CPE    2
cpe:/a:redis:redis-server
cpe:/o:debian:debian_linux:8.x

© SecPod Technologies