cbcvebase.
CVE-2007-5686
published 2007-10-28

CVE-2007-5686: initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding…

medium4.9CVSS 3.1
AVLACLAuNCCINAN
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.

Affected

2 ranges
VendorProductVersion rangeFixed in
debianshadow——
rpathrpath_linux——

CVSS provenance

nvd4.9MEDIUMAV:L/AC:L/Au:N/C:C/I:N/A:N
osv4.9MEDIUM