VULHUB ™

WvDial is a Linux-based dialer, intended to allow dialup network functionality. The default installation of WvDial creates a configuration file('wvdial.conf') with world-readable permissions. Sensitive information may be stored in this file, such as usernames/passwords for dialup services. It should be noted that WvDial does not automatically store dialup account information. Additionally, users have the option of using a pre-existing configuration file. This issue is easily exploited by local users. It has been reported that this default configuration may not be present in all systems using WvDial (such as RedHat).

WvDial is a Linux-based dialer, intended to allow dialup network functionality. The default installation of WvDial creates a configuration file('wvdial.conf') with world-readable permissions. Sensitive information may be stored in this file, such as usernames/passwords for dialup services. It should be noted that WvDial does not automatically store dialup account information. Additionally, users have the option of using a pre-existing configuration file. This issue is easily exploited by local users. It has been reported that this default configuration may not be present in all systems using WvDial (such as RedHat).