Vulnerabilities > CVE-2006-2147 - Unspecified vulnerability in Resmgr Resmgrd

047910
CVSS 3.6 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
local
low complexity
resmgr
nessus

Summary

resmgrd in resmgr for SUSE Linux and other distributions does not properly handle when access to a USB device is granted by using "usb:<bus>,<dev>" notation, which grants access to all USB devices and allows local users to bypass intended restrictions. NOTE: this is a different vulnerability than CVE-2005-4788.

Vulnerable Configurations

Part Description Count
Application
Resmgr
1

Nessus

NASL familyDebian Local Security Checks
NASL idDEBIAN_DSA-1047.NASL
descriptionA problem has been discovered in resmgr, a resource manager library daemon and PAM module, that allows local users to bypass access control rules and open any USB device when access to one device was granted.
last seen2020-06-01
modified2020-06-02
plugin id22589
published2006-10-14
reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/22589
titleDebian DSA-1047-1 : resmgr - programming error