{"id":"CVE-2011-3589","aliases":["EUVD-2011-3550","GHSA-r3g9-j8c8-9p7g","RHSA-2011:1532","RHSA-2012:0152"],"status":"published","title":"The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1...","description":"The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, uses world-readable permissions for vmcore files, which allows local users to obtain sensitive information by inspecting the file content, as demonstrated by a search for a root SSH key.","severity":{"version":"2.0","score":5.7,"vector":"AV:A/AC:M/Au:N/C:C/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00548,"percentile":0.46135,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-310"],"published":"2014-02-15T11:00:00Z","modified":"2026-06-26T10:17:55Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kexec-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-209.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kexec-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-209.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kexec-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-209.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kexec-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-209.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kexec-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-209.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kexec-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-209.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kexec-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-209.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kexec-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-209.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kexec-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.102pre-154.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kexec-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.102pre-154.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kexec-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.102pre-154.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kexec-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.102pre-154.el5"}]}],"bundled":3}],"products":[{"vendor":"redhat","product":"kexec-tools"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=716439","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2011-1532.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0152.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3589","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-r3g9-j8c8-9p7g"},{"url":"https://access.redhat.com/errata/RHSA-2011:1532","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/kexec-tools.html#RHSA-2011-1532","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=681796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=708503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=719105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=725484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=727892","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=731394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=734528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=739050","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1532.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3588","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3588","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3589","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3589","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3590","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3590","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0152","tags":["advisory"]},{"url":"https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.8_Technical_Notes/kexec-tools.html#RHSA-2012-0152","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=662530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=678308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=709622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=748319","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0152.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-3589","description":"The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, uses world-readable permissions for vmcore files, which allows local users to obtain sensitive information by inspecting the file content, as demonstrated by a search for a root SSH key.","status":"published","published":"2014-02-15T11:00:00Z","modified":"2024-08-06T23:37:48.227Z","updated_at":"2026-11-02T14:35:37.671707Z"}],"euvd":[{"id":"EUVD-2011-3550","description":"The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, uses world-readable permissions for vmcore files, which allows local users to obtain sensitive information by inspecting the file content, as demonstrated by a search for a root SSH key.","status":"published","published":"2014-02-15T11:00:00Z","modified":"2024-08-06T23:37:48Z","updated_at":"2026-11-03T01:39:50.860626Z"}],"ghsa":[{"id":"GHSA-r3g9-j8c8-9p7g","title":"The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1...","description":"The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, uses world-readable permissions for vmcore files, which allows local users to obtain sensitive information by inspecting the file content, as demonstrated by a search for a root SSH key.","status":"published","published":"2022-05-17T04:51:12Z","modified":"2023-01-28T05:02:40Z","updated_at":"2026-11-02T14:43:49.260703Z"}],"nvd":[{"id":"CVE-2011-3589","description":"The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, uses world-readable permissions for vmcore files, which allows local users to obtain sensitive information by inspecting the file content, as demonstrated by a search for a root SSH key.","status":"published","published":"2014-02-15T14:57:07.113Z","modified":"2026-06-16T23:33:33.11Z","cvss":[{"version":"2.0","score":5.7,"vector":"AV:A/AC:M/Au:N/C:C/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:12.639283Z"}],"osv":[{"id":"RHSA-2011:1532","title":"Red Hat Security Advisory: kexec-tools security, bug fix, and enhancement update","status":"published","published":"2024-09-15T19:22:00Z","modified":"2026-06-26T10:17:13Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:0152","title":"Red Hat Security Advisory: kexec-tools security, bug fix, and enhancement update","status":"published","published":"2024-09-15T19:22:04Z","modified":"2026-06-26T10:17:55Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}