Unscored severity · published Oct 28, 2007
CVE-2007-5686
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts
–
CVSS
0.9%
EPSS
No
On KEV
Description
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RL
Rpath Linux · Rpath
1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5686
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5686
Patch
http://secunia.com/advisories/27215
www.securityfocus.com
http://www.securityfocus.com/archive/1/482129/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/482857/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/26048
www.vupen.com
http://www.vupen.com/english/advisories/2007/3474
issues.rpath.com
https://issues.rpath.com/browse/RPL-1825
More from Rpath Linux
–
CVE-2008-3138
The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown…
–
CVE-2008-3139
The RTMPT dissector in Wireshark (formerly Ethereal) 0.99.8 through 1.0.0 allows remote attackers to cause a denial of service (crash) via unknown vectors
–
CVE-2008-1078
expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID]…
–
CVE-2007-1351
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to…
–
CVE-2007-0536
The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain…