Bug 424161
| Summary: | Tricking sysreport into running 'rm -rf /' critical data loss | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 5 | Reporter: | RHEL Program Management <pm-rhel> |
| Component: | sos | Assignee: | Navid Sheikhol-Eslami <neslami> |
| Status: | CLOSED ERRATA | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | urgent | ||
| Version: | 5.1 | CC: | agk, bmr, tao |
| Target Milestone: | --- | Keywords: | ZStream |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | RHBA-2008-8237 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2008-04-08 15:57:50 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 332211 | ||
| Bug Blocks: | |||
|
Description
RHEL Program Management
2007-12-13 20:42:56 UTC
Suggested errata text (sent to docs) "The sysreport utility in Red Hat Enterprise Linux 5 did not sanitise the case number entered by the administrator, or the machine hostname. By entering certain invalid data an administrator could inadvertently cause the script to attempt to recursively remove all directories." An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2008-8237.html |