PT-2005-5452 · Suse · Suse Linux

Publicado 2005-12-31 · Atualizado 2008-09-05 · CVE-2005-4789

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SUSE Linux versions 9.2 and 9.3

Description The issue is related to the resmgr component, which does not properly enforce class-specific exclude rules in certain situations. This allows local users to bypass intended access restrictions for USB devices that set their class ID at the interface level.

Recommendations For SUSE Linux versions 9.2 and 9.3, consider restricting access to USB devices or implementing additional access control mechanisms to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-4789

Produtos afetados

Suse Linux

Referências · 3

• http://securityfocus.com/bid/15037 · Correção
• http://novell.com/linux/security/advisories/2005_22_sr.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4789 · Nota de Segurança