Calera produces a variety of Linux and Unix based operating systems, including Open Unix, UnixWare and Open Server. A vulnerability has been reported in the default installation of some versions of UnixWare and Open Unix. Files exist which are world readable and include the encrypted root password. A local user would be able to access this information, and may be able to mount a dictionary attack on the root password without detection. It is not currently known if this file reflects the current state of a changed root password.
Calera produces a variety of Linux and Unix based operating systems, including Open Unix, UnixWare and Open Server. A vulnerability has been reported in the default installation of some versions of UnixWare and Open Unix. Files exist which are world readable and include the encrypted root password. A local user would be able to access this information, and may be able to mount a dictionary attack on the root password without detection. It is not currently known if this file reflects the current state of a changed root password.