CVE-2007-5686
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows...
CVE-2007-5686 is a medium vulnerability (CVSS 4.9) in Rpath Linux, published October 28, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.94%, the 61st percentile. No source names a fixed version.
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
Exploit likelihood
What each source reports
NVD Score used
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
- Record
CVE-2007-5686- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:C/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
- Record
CVE-2007-5686- Updated
- 2026-11-02
EUVDEUVD-2007-5658 No score
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
- Record
EUVD-2007-5658- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ww36-68ch-v6xq No score
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows...
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
- Record
GHSA-ww36-68ch-v6xq- Updated
- 2026-11-02
OSV No score
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
- Record
CVE-2007-5686- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-5686 No score
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
- Record
DEBIAN-CVE-2007-5686- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
shadowDebian:12 |
All versions, plus listed versions 1:4.13+dfsg1-11:4.13+dfsg1-1+deb12u11:4.13+dfsg1-1+deb12u21:4.13+dfsg1-21:4.13+dfsg1-3 Show 45 moreShow less1:4.13+dfsg1-41:4.13+dfsg1-51:4.15.1-11:4.15.2-11:4.15.2-21:4.15.2-31:4.15.3-11:4.15.3-21:4.15.3-31:4.16.0-11:4.16.0-21:4.16.0-31:4.16.0-41:4.16.0-51:4.16.0-61:4.16.0-71:4.17.0-11:4.17.0~rc1-11:4.17.0~rc1-21:4.17.1-11:4.17.1-21:4.17.2-11:4.17.2-21:4.17.2-31:4.17.2-41:4.17.2-51:4.17.2-5+hurd.11:4.17.2-61:4.17.3-11:4.17.3-21:4.17.3-31:4.17.4-11:4.17.4-21:4.18.0-11:4.18.0-21:4.19.0-11:4.19.0-21:4.19.0-31:4.19.0-41:4.19.2-11:4.19.3-11:4.19.3-21:4.20.2-11:4.20.2-21:4.20.3-1 |
None known |
shadowDebian:13 |
All versions, plus listed versions 1:4.17.4-21:4.18.0-11:4.18.0-21:4.19.0-11:4.19.0-2 Show 8 moreShow less1:4.19.0-31:4.19.0-41:4.19.2-11:4.19.3-11:4.19.3-21:4.20.2-11:4.20.2-21:4.20.3-1 |
None known |
shadowDebian:14 |
All versions, plus listed versions 1:4.17.4-21:4.18.0-11:4.18.0-21:4.19.0-11:4.19.0-2 Show 8 moreShow less1:4.19.0-31:4.19.0-41:4.19.2-11:4.19.3-11:4.19.3-21:4.20.2-11:4.20.2-21:4.20.3-1 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | affected, aliases, references, title | GitHub Advisories, OSV |
| 2026-11-02 | created | CVE List, NVD |
References
securityfocus.com/archive/1/482857/100/0/threaded
issues.rpath.com/browse/RPL-1825
vupen.com/english/advisories/2007/3474
secunia.com/advisories/27215
nvd.nist.gov/vuln/detail/CVE-2007-5686
github.com/advisories/GHSA-ww36-68ch-v6xq
security-tracker.debian.org/tracker/CVE-2007-5686