PT-2004-3548 · Suse · Suse Core 9

Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-2658

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SUSE CORE 9

Description The issue is related to the resmgr in SUSE CORE 9, which does not properly identify terminal names. This allows local users to spoof terminals and login types.

Recommendations For SUSE CORE 9, consider restricting access to the resmgr until a proper fix is applied to prevent terminal spoofing.

Fix

Related Identifiers

CVE-2004-2658

Affected Products

Suse Core 9

References · 2

• http://support.novell.com/techcenter/psdb/fa6c6a3e792bf79b1d85821c689ea578.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-2658 · Security Note