VULNERABILITY INTELLIGENCE

CVE-2007-5686

CVSS score4.9 MEDIUM
EPSS probability0.94%
CISA KEVNot currently listed
Published2007-10-28
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:N/A:N

Description

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.

Primary references