PT-2006-3126 · Suse · Resmgr

Publicado 2006-05-02 · Atualizado 2017-07-20 · CVE-2006-2147

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions resmgr versions (affected versions not specified)

Description The issue arises from improper handling of access to USB devices in resmgrd, part of the resmgr package for SUSE Linux and other distributions. Specifically, using the "usb:," notation grants access to all USB devices, allowing local users to bypass intended restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-2147

DSA-1047-1

Produtos afetados

Resmgr

Referências · 8

• http://secunia.com/advisories/19898 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2147 · Nota de Segurança
• http://lists.suse.com/archive/suse-security-announce/2006-Feb/0008.html · Correção, Aviso do Fabricante
• http://debian.org/security/2006/dsa-1047 · Correção, Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26160 · Nota
• http://securityfocus.com/bid/17752 · Nota
• http://vupen.com/english/advisories/2006/1592 · Nota
• http://secunia.com/advisories/19887 · Nota