CVE:CVE-2014-0189
CNNVD:CNNVD-201405-039
virt-who是Linux开源的一个服务。
virt-who中存在加密问题漏洞，该漏洞源于程序对/etc/sysconfig/virt-who目录使用全局可读权限。本地攻击者利用该漏洞获取管理程序密码。
solution:Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade virt-who_project virt-who to a higher version than -