PT-2005-5451 · Suse · Suse Linux

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4788

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SUSE Linux versions 9.2 and 9.3

Description The issue allows local users to bypass access control rules for USB devices. This is achieved through an alternate syntax for specifying USB devices in resmgr.

Recommendations For SUSE Linux versions 9.2 and 9.3, consider restricting access to USB devices until a patch is available. As a temporary workaround, limit the use of resmgr to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-4788

Affected Products

Suse Linux

References · 3

• http://novell.com/linux/security/advisories/2005_22_sr.html · Vendor Advisory
• http://securityfocus.com/bid/15037 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4788 · Security Note