PT-2007-6677 · Rpath+1 · Rpath Linux+1

Publicado 2007-10-28 · Atualizado 2018-10-15 · CVE-2007-5686

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions rPath Linux 1

Description The issue allows local users to obtain sensitive information regarding authentication attempts due to insecure permissions set for the /var/log/btmp file. This also prevents sshd from logging failed authentication attempts by remote attackers because sshd detects the insecure permissions and does not log certain events.

Recommendations For rPath Linux 1, consider changing the permissions of the /var/log/btmp file to secure it and ensure that sshd can log failed authentication attempts properly. As a temporary workaround, monitor the system for potential security breaches, focusing on authentication attempts.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-5686

ECHO-FA5B-6CEC-3E77

Produtos afetados

Debian

Rpath Linux

Referências · 10

• http://vupen.com/english/advisories/2007/3474 · Nota
• http://securityfocus.com/archive/1/482857/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5686 · Nota de Segurança
• http://secunia.com/advisories/27215 · Aviso do Fabricante
• http://securityfocus.com/archive/1/482129/100/100/threaded · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-5686 · Aviso do Fabricante
• http://securityfocus.com/bid/26048 · Nota
• https://security-tracker.debian.org/tracker/CVE-2007-5686 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2007-5686 · Aviso do Fabricante
• https://issues.rpath.com/browse/RPL-1825 · Nota