NVD

Id
56081  
Name
CVE-2007-3945  
Description
Rule Set Based Access Control (RSBAC) before 1.3.5 does not properly use the Linux Kernel Crypto API for the Linux kernel 2.6.x, which allows context-dependent attackers to bypass authentication controls via unspecified vectors, possibly involving User Management password hashing and unchecked function return codes.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-07-23  
Modified Date
2011-03-07  
Seq
2007-3945  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
285601 56081 CVE-2007-3945 http://download.rsbac.org/code/1.3.5/changes-1.3.5.txt  View
285602 56081 CVE-2007-3945 2911  View
285603 56081 CVE-2007-3945 20070719 [ANNOUNCE] RSBAC 1.3.5 released  View
285604 56081 CVE-2007-3945 25001  View
285605 56081 CVE-2007-3945 ADV-2007-2610  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57192 JVNDB-2007-005884 RSBAC における認証の制御を回避される脆弱性 Rule Set Based Access Control (RSBAC) は、Linux カーネルに対して Linux Kernel Crypto API を適切に使用しないため、認証の制御を回避される脆弱性が存在します。 CVE-2007-3945 27300 CVE-2007-3945 56081 6.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005884.html 2007-07-23 2012-12-20 View