QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-5686

Back to search

CVE-2007-5686

Published: Oct 28, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.

VendorProductVersions

n/a

n/a

affected
n/a

References

20071026 FLEA-2007-0060-1 initscripts
mailing-list
x_refsource_BUGTRAQ
20071011 rPSA-2007-0214-1 initscripts
mailing-list
x_refsource_BUGTRAQ
ADV-2007-3474
vdb-entry
x_refsource_VUPEN
26048
vdb-entry
x_refsource_BID
27215
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now