CVE-2007-6283: Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions,...

Security readout for executives and security teams

This flaw is a local access problem in older Red Hat Enterprise Linux 5 and Fedora systems. The BIND control key file could be installed world-readable, allowing a local user to issue unauthorized named control commands, including stopping DNS service and causing outage. Exposure is most plausible on legacy Red Hat Enterprise Linux 5 or Fedora hosts running BIND/named with affected packaging and local user access. The bundle does not identify broader versions, remote exposure, or current downstream rebuild impact. Treat as a moderate legacy infrastructure risk. It is not documented as remotely exploitable or actively exploited, but affected DNS servers could be stopped by local users, creating avoidable service disruption. Mitigation focus: Apply the relevant Red Hat or Fedora vendor security update.; Check vendor guidance before making manual permission changes.; Ensure /etc/rndc.key is not world-readable on affected hosts..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.