PT-2005-5452 · Suse · Suse Linux

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4789

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SUSE Linux versions 9.2 and 9.3

Description The issue is related to the resmgr component, which does not properly enforce class-specific exclude rules in certain situations. This allows local users to bypass intended access restrictions for USB devices that set their class ID at the interface level.

Recommendations For SUSE Linux versions 9.2 and 9.3, consider restricting access to USB devices or implementing additional access control mechanisms to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-4789

Affected Products

Suse Linux

References · 3

• http://securityfocus.com/bid/15037 · Patch
• http://novell.com/linux/security/advisories/2005_22_sr.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4789 · Security Note