CVE-2006-2147 Security feature bypass in n/a
Local users can bypass USB access restrictions in resmgrd, gaining unauthorized access to all USB devices.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-2147?
CVE-2006-2147 is a low-severity vulnerability in n/a, published on 2 May 2006. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
resmgrd in resmgr for SUSE Linux and other distributions does not properly handle when access to a USB device is granted by using "usb:<bus>,<dev>" notation, which grants access to all USB devices and allows local users to bypass intended restrictions. NOTE: this is a different vulnerability than CVE-2005-4788.
Which versions are affected by CVE-2006-2147?
It affects 1 product.
Products include Resmgr Resmgrd.
How do I fix CVE-2006-2147?
Apply the vendor's patch.
Is CVE-2006-2147 being exploited?
There is no known exploitation of CVE-2006-2147 in the wild and no public exploit code.
Sources
Also known as DSA-1047-1, GHSA-m9jx-6fh3-9mm7.