authd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by leveraging a race condition between the creation of the key, and the chmod to protect it.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - authd insecure /etc/ident.key file creation (CVE-2016-4982)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - authd insecure /etc/ident.key file creation (CVE-2016-4982)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - authd insecure /etc/ident.key file creation (CVE-2016-4982)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - authd insecure /etc/ident.key file creation (CVE-2016-4982)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Severity
199111	RHEL 5 : authd (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
199089	RHEL 4 : authd (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
199073	RHEL 7 : authd (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
199025	RHEL 6 : authd (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2016-4982

medium

Tenable Plugins

medium

medium

medium

medium