Red Hat Security Advisory: rhncfg security, bug fix, and enhancement update Security Advisory secalert@redhat.com Red Hat Security Response Team RHSA-2012:1369 Final 1 1 2012-10-15T18:27:00Z Current version 2012-10-15T18:28:00Z 2012-10-15T18:27:00Z Red Hat rhsa-to-cvrf 1.0.1484 2012-10-15T18:37:01Z Updated rhncfg packages that fix one security issue, two bugs, and add one enhancement are now available for Red Hat Network Tools for Red Hat Enterprise Linux 5 and 6; Red Hat Enterprise Linux 5.3 Long Life; and Red Hat Enterprise Linux 5.6, 6.0, 6.1, and 6.2 Extended Update Support. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. Red Hat Network Tools provide programs and libraries that allow your system to use provisioning, monitoring, and configuration management capabilities provided by Red Hat Network and Red Hat Network Satellite. It was discovered that the Red Hat Network (RHN) Configuration Client (rhncfg-client) tool set world-readable permissions on the "/var/log/rhncfg-actions" file, used to store the output of different rhncfg-client actions (such as diffing and verifying files). This could possibly allow a local attacker to obtain sensitive information they would otherwise not have access to. (CVE-2012-2679) Note: With this update, rhncfg-client cannot create diffs of files that are not already world-readable, and "/var/log/rhncfg-actions" can only be read and written to by the root user. This issue was discovered by Paul Wouters of Red Hat. This update also fixes the following bugs: * When the user attempted to use the "rhncfg-client get" command to download a backup of deployed configuration files and these configuration files contained a broken symbolic link, the command failed with an error. This update ensures that "rhncfg-client get" no longer fails in this scenario. (BZ#836445) * The SYNOPSIS section of the rhn-actions-control(8) manual page has been updated to include the "--report" command line option as expected. (BZ#820517) As well, this update adds the following enhancement: * The rhncfg-manager utility now supports a new command line option, "--selinux-context". This option can be used to upload files and directories without setting the Security-Enhanced Linux (SELinux) context. (BZ#770575) All users of Red Hat Network Tools are advised to upgrade to these updated packages, which correct these issues and add this enhancement. Please see https://www.redhat.com/footer/terms-of-use.html Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate https://rhn.redhat.com/errata/RHSA-2012-1369.html https://rhn.redhat.com/errata/RHSA-2012-1369.html https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/security/updates/classification/#moderate https://bugzilla.redhat.com/show_bug.cgi?id=820517 https://bugzilla.redhat.com/show_bug.cgi?id=820517 RHN Tools (v. 6 Workstation) RHN Tools (v. 5 Server) RHN Tools (v. 6.1.z Server) RHN Tools (v. 5 Client) RHN Tools (v. 6 ComputeNode) RHN Tools (v. 5.3.LL Server) RHN Tools (v. 6.2.z Server) RHN Tools (v. 6.0.z Server) RHN Tools (v. 6.3.z Server) RHN Tools (v. 6 Client) RHN Tools (v. 5.6.z Server) rhncfg-5.10.27-8.el5sat.src.rpm rhncfg-5.10.27-8.el6sat.src.rpm rhncfg-5.10.27-8.el6sat as a component of RHN Tools (v. 6 Workstation) rhncfg-5.10.27-8.el5sat as a component of RHN Tools (v. 5 Server) rhncfg-5.10.27-8.el6sat as a component of RHN Tools (v. 6.1.z Server) rhncfg-5.10.27-8.el5sat as a component of RHN Tools (v. 5 Client) rhncfg-5.10.27-8.el6sat as a component of RHN Tools (v. 6 ComputeNode) rhncfg-5.10.27-8.el5sat as a component of RHN Tools (v. 5.3.LL Server) rhncfg-5.10.27-8.el6sat as a component of RHN Tools (v. 6.2.z Server) rhncfg-5.10.27-8.el6sat as a component of RHN Tools (v. 6.0.z Server) rhncfg-5.10.27-8.el6sat as a component of RHN Tools (v. 6.3.z Server) rhncfg-5.10.27-8.el6sat as a component of RHN Tools (v. 6 Client) rhncfg-5.10.27-8.el5sat as a component of RHN Tools (v. 5.6.z Server) It was discovered that the Red Hat Network (RHN) Configuration Client (rhncfg-client) tool set world-readable permissions on the "/var/log/rhncfg-actions" file, used to store the output of different rhncfg-client actions (such as diffing and verifying files). This could possibly allow a local attacker to obtain sensitive information they would otherwise not have access to. 2012-05-23T00:00:00Z 2012-06-14T00:00:00Z CVE-2012-2679 5Client-RHNTools:rhncfg-5.10.27-8.el5sat 5Server-RHNTools-5.3.LL:rhncfg-5.10.27-8.el5sat 5Server-RHNTools-5.6.z:rhncfg-5.10.27-8.el5sat 5Server-RHNTools:rhncfg-5.10.27-8.el5sat 6Client-RHNTools:rhncfg-5.10.27-8.el6sat 6ComputeNode-RHNTools:rhncfg-5.10.27-8.el6sat 6Server-RHNTools-6.0.Z:rhncfg-5.10.27-8.el6sat 6Server-RHNTools-6.1.Z:rhncfg-5.10.27-8.el6sat 6Server-RHNTools-6.2.Z:rhncfg-5.10.27-8.el6sat 6Server-RHNTools-6.3.Z:rhncfg-5.10.27-8.el6sat 6Workstation-RHNTools:rhncfg-5.10.27-8.el6sat Moderate 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 https://rhn.redhat.com/errata/RHSA-2012-1369.html https://www.redhat.com/security/data/cve/CVE-2012-2679.html CVE-2012-2679 https://bugzilla.redhat.com/show_bug.cgi?id=825275 bz#825275: CVE-2012-2679 rhncfg: Insecure permissions used for /var/log/rhncfg-actions file This issue was discovered by Paul Wouters of Red Hat.