CVE-2007-5686
No fix known EPSS <1%
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
Products: rpath_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | shadow | no fix |
| Debian 13 | shadow | no fix |
| Debian 14 | shadow | no fix |