CVE ID:	CVE-2012-4453
Description:	dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
Test IDs:	1.3.6.1.4.1.25623.1.0.871086   1.3.6.1.4.1.25623.1.0.120550   1.3.6.1.4.1.25623.1.0.123522   1.3.6.1.4.1.25623.1.0.864777   1.3.6.1.4.1.25623.1.0.864774
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4453 55713 http://www.securityfocus.com/bid/55713 RHSA-2013:1674 http://rhn.redhat.com/errata/RHSA-2013-1674.html [oss-security] 20120927 Re: dracut creates non-world readable initramfs images http://www.openwall.com/lists/oss-security/2012/09/27/4 [oss-security] 20120927 Re: dracut creates world readable initramfs images http://www.openwall.com/lists/oss-security/2012/09/27/6 [oss-security] 20120927 dracut creates non-world readable initramfs images http://www.openwall.com/lists/oss-security/2012/09/27/3 dracut-initramfs-information-disclosure(79258) https://exchange.xforce.ibmcloud.com/vulnerabilities/79258 http://git.kernel.org/?p=boot/dracut/dracut.git%3Ba=commit%3Bh=e1b48995c26c4f06d1a71 http://git.kernel.org/?p=boot/dracut/dracut.git%3Ba=commit%3Bh=e1b48995c26c4f06d1a71 https://bugzilla.redhat.com/show_bug.cgi?id=859448 https://bugzilla.redhat.com/show_bug.cgi?id=859448