CVE-2015-1415

State: Published
Severity: Not scored
Published: Apr 10, 2015
Updated: Aug 6, 2024
Reserved: Jan 27, 2015

Description

The bsdinstall installer in FreeBSD 10.x before 10.1 p9, when configuring full disk encrypted ZFS, uses world-readable permissions for the GELI keyfile (/boot/encryption.key), which allows local users to obtain sensitive key information by reading the file.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

1032042vdb-entry
FreeBSD-SA-15:08vendor-advisory
20150407 FreeBSD 10.x ZFS encryption.key disclosure (CVE-2015-1415)mailing-list
http://packetstormsecurity.com/files/131338/FreeBSD-10.x-ZFS-encryption.key-Disclosure.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.