World-writable permissions in wimaxd.log file in Intel WiMAX Network Service

CVE-2013-4216 · LOW Severity

AV:L/AC:L/AU:N/C:N/I:N/A:P

The Trace_OpenLogFile function in InfraStack/OSDependent/Linux/InfraStackModules/TraceModule/TraceModule.c in the Trace module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses world-writable permissions for wimaxd.log, which allows local users to cause a denial of service (data corruption) by modifying this file.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.