SUSE ResMgr Unauthorized USB Device Access Vulnerabilities

Bugtraq ID:	15037
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 07 2005 12:00AM
Updated:	Oct 07 2005 12:00AM
Credit:	This vulnerability was announced in the referenced SUSE summary report.
Vulnerable:	S.u.S.E. resmgr + S.u.S.E. Linux Personal 9.3 x86_64 + S.u.S.E. Linux Personal 9.3 + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Professional 9.3 x86_64 + S.u.S.E. Linux Professional 9.3 + S.u.S.E. Linux Professional 9.2 x86_64 + S.u.S.E. Linux Professional 9.2
Not Vulnerable:

SUSE ResMgr Unauthorized USB Device Access Vulnerabilities

resmgr is prone to multiple vulnerabilities that permit unauthorized access to USB devices.

Exploitation of these issues would result in a bypass of access controls leading to a false sense of security and a possible loss of confidentiality if data is intercepted; other attacks are also possible.

SUSE ResMgr Unauthorized USB Device Access Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SUSE ResMgr Unauthorized USB Device Access Vulnerabilities

Solution:
SUSE has released Security Summary Report SUSE-SR:2005:022 with fixes addressing this and other issues. Please see the referenced advisory for further information.

SUSE ResMgr Unauthorized USB Device Access Vulnerabilities

References:

• resmgr - A program to allow arbitrary access to device files (SuSE)