PT-2007-6677 · Rpath+1 · Rpath Linux+1

Published 2007-10-28 · Updated 2018-10-15 · CVE-2007-5686

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions rPath Linux 1

Description The issue allows local users to obtain sensitive information regarding authentication attempts due to insecure permissions set for the /var/log/btmp file. This also prevents sshd from logging failed authentication attempts by remote attackers because sshd detects the insecure permissions and does not log certain events.

Recommendations For rPath Linux 1, consider changing the permissions of the /var/log/btmp file to secure it and ensure that sshd can log failed authentication attempts properly. As a temporary workaround, monitor the system for potential security breaches, focusing on authentication attempts.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-5686

ECHO-FA5B-6CEC-3E77

Affected Products

Debian

Rpath Linux

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2007-5686 · Security Note
• http://secunia.com/advisories/27215 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-5686 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-5686 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-5686 · Vendor Advisory
• http://vupen.com/english/advisories/2007/3474 · Note
• http://securityfocus.com/archive/1/482857/100/0/threaded · Note
• http://securityfocus.com/archive/1/482129/100/100/threaded · Note
• http://securityfocus.com/bid/26048 · Note
• https://issues.rpath.com/browse/RPL-1825 · Note