PT-2007-5082 · None+1 · Aide+1

Published 2007-09-04 · Updated 2017-09-29 · CVE-2007-3849

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux (RHEL) 5 ships the rpm for the Advanced Intrusion Detection Environment (AIDE) before 0.13.1

Description: The issue allows context-dependent attackers to bypass file integrity checks and modify certain files due to a database lacking checksum information in the AIDE rpm.

Recommendations: For Red Hat Enterprise Linux (RHEL) 5 with AIDE before 0.13.1, update the AIDE rpm to version 0.13.1 or later to include checksum information in the database and prevent file integrity check bypasses.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-3849

RHSA-2007:0539

RHSA-2007_0539

Affected Products

Aide

Red Hat

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2007-3849 · Security Note
• http://secunia.com/advisories/26711 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0539.html · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2007-3849 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10217 · Note
• http://osvdb.org/40439 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36452 · Note
• http://securityfocus.com/bid/25542 · Note
• https://access.redhat.com/errata/RHSA-2007:0539 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=236923 · Note
• http://securitytracker.com/id?1018652 · Note