CVE-2016-7488

High

Published: 10/11/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Teradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex/pkgmgr, which could allow a local user to modify its contents and execute commands as root.

Risk Assessment

A local user could gain administrative privileges, posing a serious security risk to the system.

Recommendation

It is recommended to fix the file permissions on /etc/luminex/pkgmgr to restrict access to authorized users only.

Other vulnerabilities in Teradata Virtual Machine Community Edition v15.10

CVE-2016-7489Critical
The perl script /opt/teradata/gsctools/bin/t2a.pl in Teradata Virtual Machine Community Edition v15.10 creates files in /tmp in an insecure manner, which may lead to elevated code execution.

Original NVD description (English source)

Teradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex/pkgmgr. These could allow a local user to modify its contents and execute commands as root.