Vulnerability in Linux Kernel
CVE-2007-3945
Rule Set Based Access Control (RSBAC) before 1.3.5 does not properly use the Linux Kernel Crypto API for the Linux kernel 2.6.x, which allows context-dependent attackers to bypass authentication controls via unspecified vectors, possibly involving User Management password hashing and unchecked function return codes.
EPSS: 0.025 (82.9th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel
- Rsbac Rule_set_based_access_control
- N/a — versions n/a
References
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
- cve@mitre.org (URL Repurposed, vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (Third Party Advisory, x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)