The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key is world readable by default.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-11-07T20:06:05
Updated: 2024-08-07T02:32:16.662Z
Reserved: 2010-06-24T00:00:00
Link: CVE-2010-2450
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-11-07T21:15:10.317
Modified: 2019-11-13T18:48:39.433
Link: CVE-2010-2450
Redhat
No data.