CVE-2007-5686
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows...
CVE-2007-5686 is a medium vulnerability (CVSS 4.9) in Rpath Linux, published October 28, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.94%, the 61st percentile. No source names a fixed version.
- Severity
- 4.9 MediumCVSS 2.0, NVD
- Exploit chance
- 0.94%EPSS, 61st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
shadowDebian:12 | All versions, plus listed versions 1:4.13+dfsg1-11:4.13+dfsg1-1+deb12u11:4.13+dfsg1-1+deb12u21:4.13+dfsg1-21:4.13+dfsg1-3 Show 45 moreShow less1:4.13+dfsg1-41:4.13+dfsg1-51:4.15.1-11:4.15.2-11:4.15.2-21:4.15.2-31:4.15.3-11:4.15.3-21:4.15.3-31:4.16.0-11:4.16.0-21:4.16.0-31:4.16.0-41:4.16.0-51:4.16.0-61:4.16.0-71:4.17.0-11:4.17.0~rc1-11:4.17.0~rc1-21:4.17.1-11:4.17.1-21:4.17.2-11:4.17.2-21:4.17.2-31:4.17.2-41:4.17.2-51:4.17.2-5+hurd.11:4.17.2-61:4.17.3-11:4.17.3-21:4.17.3-31:4.17.4-11:4.17.4-21:4.18.0-11:4.18.0-21:4.19.0-11:4.19.0-21:4.19.0-31:4.19.0-41:4.19.2-11:4.19.3-11:4.19.3-21:4.20.2-11:4.20.2-21:4.20.3-1 | None known |
shadowDebian:13 | All versions, plus listed versions 1:4.17.4-21:4.18.0-11:4.18.0-21:4.19.0-11:4.19.0-2 Show 8 moreShow less1:4.19.0-31:4.19.0-41:4.19.2-11:4.19.3-11:4.19.3-21:4.20.2-11:4.20.2-21:4.20.3-1 | None known |
shadowDebian:14 | All versions, plus listed versions 1:4.17.4-21:4.18.0-11:4.18.0-21:4.19.0-11:4.19.0-2 Show 8 moreShow less1:4.19.0-31:4.19.0-41:4.19.2-11:4.19.3-11:4.19.3-21:4.20.2-11:4.20.2-21:4.20.3-1 | None known |
What each source reports
NVD Score used
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
- Record
CVE-2007-5686- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:C/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
- Record
CVE-2007-5686- Updated
- 2026-11-02
EUVDEUVD-2007-5658No score
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
- Record
EUVD-2007-5658- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ww36-68ch-v6xqNo score
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows...
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
- Record
GHSA-ww36-68ch-v6xq- Updated
- 2026-11-02
OSVNo score
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
- Record
CVE-2007-5686- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-5686No score
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
- Record
DEBIAN-CVE-2007-5686- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| affected, aliases, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/archive/1/482857/100/0/threaded
issues.rpath.com/browse/RPL-1825
vupen.com/english/advisories/2007/3474
secunia.com/advisories/27215
nvd.nist.gov/vuln/detail/CVE-2007-5686
github.com/advisories/GHSA-ww36-68ch-v6xq
security-tracker.debian.org/tracker/CVE-2007-5686