CVE-2010-2450: 
Shibboleth Service Provider vulnerability analysis and mitigation

The Shibboleth SP 2.0 keygen.sh script, located by default in /usr/local/etc/shibboleth, contains a security vulnerability related to file permissions. The script uses OpenSSL to generate a DES private key which is stored in sp-key.pm, but relies on the root umask (default 22) instead of explicitly setting file permissions, resulting in the private key being world-readable by default (NVD, Debian Bug).

The vulnerability was assigned CVE-2010-2450 and received a CVSS v3.1 Base Score of 7.5 (HIGH) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. The issue stems from the script's reliance on the system's default umask settings rather than explicitly setting secure file permissions, potentially exposing sensitive cryptographic material (NVD).

The vulnerability allows unauthorized users to read the private key file, which could compromise the security of the Shibboleth service provider installation. This exposure of sensitive cryptographic material could potentially lead to impersonation or other security breaches (Debian Bug).

The vulnerability is easily exploitable as it only requires local access to the system where Shibboleth SP is installed to read the world-readable private key file (Security Tracker).

The issue was fixed in Shibboleth SP version 2.3.1+dfsg-2 by modifying the shib-keygen script to create the certificate key group-readable by _shibd and not world-readable. For earlier versions, administrators can manually adjust the file permissions of the generated key file to restrict access (Debian Bug).