The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key is world readable by default.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-11-07T20:06:05

Updated: 2024-08-07T02:32:16.662Z

Reserved: 2010-06-24T00:00:00

Link: CVE-2010-2450

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2019-11-07T21:15:10.317

Modified: 2019-11-13T18:48:39.433

Link: CVE-2010-2450

cve-icon Redhat

No data.