Unrated severityNVD Advisory· Published Apr 4, 2008· Updated Jun 16, 2026
CVE-2008-0884
CVE-2008-0884
Description
The Replace function in the capp-lspp-config script in the (1) lspp-eal4-config-ibm and (2) capp-lspp-eal4-config-hp packages before 0.65-2 in Red Hat Enterprise Linux (RHEL) 5 uses lstat instead of stat to determine the /etc/pam.d/system-auth file permissions, leading to a change to world-writable permissions for the /etc/pam.d/system-auth-ac file, which allows local users to gain privileges by modifying this file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
- Range: <0.65-2
Patches
Vulnerability mechanics
References
6- rhn.redhat.com/errata/RHSA-2008-0193.htmlnvdThird Party Advisory
- securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/28557nvdThird Party AdvisoryVDB Entry
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/41584nvdThird Party AdvisoryVDB Entry
- secunia.com/advisories/29642nvdBroken Link
News mentions
0No linked articles in our index yet.