CVE-2012-2314

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.40%

Published

Jul 3, 2012

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The bootloader configuration module (pyanaconda/bootloader.py) in Anaconda uses 755 permissions for /etc/grub.d, which allows local users to obtain password hashes and conduct brute force password guessing attacks.

Weaknesses (CWE)

CWE-264

Affected Products (1)

fedoraproject · anacondavulnerable

References (14)

http://git.fedorahosted.org/git/?p=anaconda.git%3Ba=commit%3Bh=03ef13b625cc06873a924e0610340f8489fd92df

http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080188.html

http://www.openwall.com/lists/oss-security/2012/05/04/10

Patch

http://www.openwall.com/lists/oss-security/2012/05/04/12

http://www.openwall.com/lists/oss-security/2024/01/15/3

http://www.securityfocus.com/bid/53486

https://bugzilla.redhat.com/show_bug.cgi?id=819031