CVE-2007-3945

MEDIUM 6.4CVE-2007-3945 · Published 23/07/2007 · updated 16/06/2026

In short

CVE-2007-3945 is a MEDIUM (CVSS 6.4) vulnerability affecting rule set based access control (rsbac).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 84.7% of all vulnerabilities.
Fix: update to 1.3.5 or later.

Package	Affected versions	Patched versions
rule set based access control rsbac	`< 1.3.5`	`1.3.5`

Description

Rule Set Based Access Control (RSBAC) before 1.3.5 does not properly use the Linux Kernel Crypto API for the Linux kernel 2.6.x, which allows context-dependent attackers to bypass authentication controls via unspecified vectors, possibly involving User Management password hashing and unchecked function return codes.

References

download.rsbac.org/code/1.3.5/changes-1.3.5.txt · Vendor Advisory
secunia.com/advisories/26147 · Broken Link
securityreason.com/securityalert/2911 · Third Party Advisory
securityfocus.com/archive/1/474161/100/0/threaded · Third Party Advisory
securityfocus.com/bid/25001 · Broken Link
vupen.com/english/advisories/2007/2610 · URL Repurposed

More vulnerabilities in rule set based access control

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free