CVE-2007-5686: Medium severity rPath rPath Linux vulnerability

Published Oct 28, 2007

Updated

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.

Affected Software

1 affected component

rPath rPath Linux=1

Remediation

Patch Available

http://secunia.com/advisories/27215

Event History

Oct 28, 2007

CVE Published

05:08 PM

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5686?

CVE-2007-5686 has been assigned a moderate severity level due to its potential to expose sensitive authentication information.

How do I fix CVE-2007-5686?

To fix CVE-2007-5686, ensure that the permissions for the /var/log/btmp file are set securely, restricting access to privileged users only.

Who is affected by CVE-2007-5686?

CVE-2007-5686 primarily affects users of rPath Linux version 1.

What are the consequences of CVE-2007-5686?

The consequences of CVE-2007-5686 include unauthorized access to sensitive authentication logs, which can lead to security breaches.

Is CVE-2007-5686 a local or remote vulnerability?

CVE-2007-5686 is a local vulnerability, as it requires local user access to exploit.