CVE-2010-1439

CVE-2010-1439 describes a local information disclosure vulnerability in the yum-rhn-plugin component of Red Hat Network Client Tools on Red Hat Enterprise Linux 5 and Fedora. The vulnerability stems from world-readable permissions on the /var/spool/up2date/loginAuth.pkl file, allowing local users to access sensitive Red Hat Network profile authentication data. With a CVSS score of 3.6, this low-severity issue could lead to unauthorized access to profile information and potentially hinder future security updates. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.