VULNERABILITY INTELLIGENCE

CVE-2010-4176

CVSS score4 MEDIUM
EPSS probability2.32%
CISA KEVNot currently listed
Published2010-12-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:N

Description

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.

Weakness classification

  • CWE-276: Incorrect Default Permissions

Primary references