CVE-2007-5686 | BDVDB-2026-27416 Detail

Description#

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/482857/100/0/threaded
https://issues.rpath.com/browse/RPL-1825
http://www.securityfocus.com/archive/1/482129/100/100/threaded
http://www.vupen.com/english/advisories/2007/3474
http://www.securityfocus.com/bid/26048
http://secunia.com/advisories/27215

Exploit#

No public exploit known

History#

Version 12007-10-28Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.