CVE-2007-6283: Centos

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.

Affected products

• Centos Centos: version 5 only
• Fedoraproject Fedora Core: any version
• Oracle Linux: version 5.0 only
• Red Hat Enterprise Linux: version 5.0 only
• Red Hat Enterprise Linux Desktop: version 5.0 only
• Red Hat Enterprise Linux For IBM Z Systems: version 5.0_s390x only
• Red Hat Enterprise Linux For Power Big Endian: version 5.0 only
• Red Hat Enterprise Linux Server: version 5.0 only
• Red Hat Enterprise Linux Workstation: version 5.0 only

Published 2007-12-18. Last modified 2026-06-16.