CVE-2007-3945

Опубликовано: 23 июл. 2007

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Rule Set Based Access Control (RSBAC) before 1.3.5 does not properly use the Linux Kernel Crypto API for the Linux kernel 2.6.x, which allows context-dependent attackers to bypass authentication controls via unspecified vectors, possibly involving User Management password hashing and unchecked function return codes.

Комментарий

http://www.frsirt.com/english/advisories/2007/2610

Ссылки

http://download.rsbac.org/code/1.3.5/changes-1.3.5.txt
Vendor Advisory
http://secunia.com/advisories/26147
Broken Link
http://securityreason.com/securityalert/2911
Third Party Advisory
http://www.securityfocus.com/archive/1/474161/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/25001
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/2610
URL Repurposed
http://download.rsbac.org/code/1.3.5/changes-1.3.5.txt
Vendor Advisory
http://secunia.com/advisories/26147
Broken Link
http://securityreason.com/securityalert/2911
Third Party Advisory
http://www.securityfocus.com/archive/1/474161/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/25001
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/2610
URL Repurposed

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:rsbac:rule_set_based_access_control:*:*:*:*:*:*:*:*

Версия до 1.3.5 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.6.0 (включая) до 2.6.39.4 (включая)

EPSS

Процентиль: 74%

0.00806

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-6qpx-xqgc-8jcg

github

почти 4 года назад