Korean
<< Back
VID 14129
Severity 30
Port 22
Protocol TCP
Class LSC
Detailed Description The host system's /usr/sbin/ifconfig file's permission or owner is unsafe. /usr/sbin/ifconfig is a command that shows the system's network status such as IP.
If this file is exposed, serious security problems can occur. So normal users need to be prohibited from accessing this file.

* Platforms Affected:
UNIX, Linux
Recommendation Reset permissions of the file lower than 700 as the following
chmod 700 /usr/sbin/ifconfig or
chmod 700 /sbin/ifconfig

if the owner of the file is not root, change the owner
chown root /usr/sbin/ifconfig or
chown root /sbin/ifconfig
Related URL (CVE)
Related URL (SecurityFocus)
Related URL (ISS)