PT-2006-3126 · Suse · Resmgr

Published 2006-05-02 · Updated 2017-07-20 · CVE-2006-2147

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions resmgr versions (affected versions not specified)

Description The issue arises from improper handling of access to USB devices in resmgrd, part of the resmgr package for SUSE Linux and other distributions. Specifically, using the "usb:," notation grants access to all USB devices, allowing local users to bypass intended restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-2147

DSA-1047-1

Affected Products

Resmgr

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-2147 · Security Note
• http://secunia.com/advisories/19898 · Note
• http://lists.suse.com/archive/suse-security-announce/2006-Feb/0008.html · Patch, Vendor Advisory
• http://debian.org/security/2006/dsa-1047 · Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26160 · Note
• http://securityfocus.com/bid/17752 · Note
• http://vupen.com/english/advisories/2006/1592 · Note
• http://secunia.com/advisories/19887 · Note