CVE-2007-5686 initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detect...
MediumCVSS 4.9
EPSS 0.94%
- Published
- Updated
- Exploit status
- No public exploit known
Description
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rpath linux | = 1 | No fix listed |
| debian/shadow(Debian:12) | All versions | No fix listed |
| debian/shadow(Debian:12) | = 1:4.13+dfsg1-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.13+dfsg1-1+deb12u1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.13+dfsg1-1+deb12u2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.13+dfsg1-2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.13+dfsg1-3 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.13+dfsg1-4 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.13+dfsg1-5 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.15.1-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.15.2-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.15.2-2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.15.2-3 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.15.3-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.15.3-2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.15.3-3 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.16.0-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.16.0-2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.16.0-3 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.16.0-4 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.16.0-5 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.16.0-6 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.16.0-7 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.0-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.0~rc1-1 | No fix listed |
Show 55 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/shadow(Debian:12) | = 1:4.17.0~rc1-2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.1-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.1-2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.2-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.2-2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.2-3 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.2-4 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.2-5 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.2-5+hurd.1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.2-6 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.3-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.3-2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.3-3 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.4-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.17.4-2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.18.0-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.18.0-2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.19.0-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.19.0-2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.19.0-3 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.19.0-4 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.19.2-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.19.3-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.19.3-2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.20.2-1 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.20.2-2 | No fix listed |
| debian/shadow(Debian:12) | = 1:4.20.3-1 | No fix listed |
| debian/shadow(Debian:13) | All versions | No fix listed |
| debian/shadow(Debian:13) | = 1:4.17.4-2 | No fix listed |
| debian/shadow(Debian:13) | = 1:4.18.0-1 | No fix listed |
| debian/shadow(Debian:13) | = 1:4.18.0-2 | No fix listed |
| debian/shadow(Debian:13) | = 1:4.19.0-1 | No fix listed |
| debian/shadow(Debian:13) | = 1:4.19.0-2 | No fix listed |
| debian/shadow(Debian:13) | = 1:4.19.0-3 | No fix listed |
| debian/shadow(Debian:13) | = 1:4.19.0-4 | No fix listed |
| debian/shadow(Debian:13) | = 1:4.19.2-1 | No fix listed |
| debian/shadow(Debian:13) | = 1:4.19.3-1 | No fix listed |
| debian/shadow(Debian:13) | = 1:4.19.3-2 | No fix listed |
| debian/shadow(Debian:13) | = 1:4.20.2-1 | No fix listed |
| debian/shadow(Debian:13) | = 1:4.20.2-2 | No fix listed |
| debian/shadow(Debian:13) | = 1:4.20.3-1 | No fix listed |
| debian/shadow(Debian:14) | All versions | No fix listed |
| debian/shadow(Debian:14) | = 1:4.17.4-2 | No fix listed |
| debian/shadow(Debian:14) | = 1:4.18.0-1 | No fix listed |
| debian/shadow(Debian:14) | = 1:4.18.0-2 | No fix listed |
| debian/shadow(Debian:14) | = 1:4.19.0-1 | No fix listed |
| debian/shadow(Debian:14) | = 1:4.19.0-2 | No fix listed |
| debian/shadow(Debian:14) | = 1:4.19.0-3 | No fix listed |
| debian/shadow(Debian:14) | = 1:4.19.0-4 | No fix listed |
| debian/shadow(Debian:14) | = 1:4.19.2-1 | No fix listed |
| debian/shadow(Debian:14) | = 1:4.19.3-1 | No fix listed |
| debian/shadow(Debian:14) | = 1:4.19.3-2 | No fix listed |
| debian/shadow(Debian:14) | = 1:4.20.2-1 | No fix listed |
| debian/shadow(Debian:14) | = 1:4.20.2-2 | No fix listed |
| debian/shadow(Debian:14) | = 1:4.20.3-1 | No fix listed |
References
- 27215 patch third-party-advisory vendor-advisory
- 20071011 rPSA-2007-0214-1 initscripts mailing-list
- 20071026 FLEA-2007-0060-1 initscripts mailing-list
- 26048 vdb-entry
- ADV-2007-3474 vdb-entry
- issues.rpath.com
- Debian Security Tracker CVE-2007-5686 vendor-advisory