CVE-2004-0667: Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open, and sys_mkn...

Security readout for executives and security teams

This is an old local privilege-escalation issue in RSBAC jail isolation. A user already on an affected system may be able to perform restricted file-creation or device-node operations inside a jail, potentially gaining more privileges than intended. Exposure is likely limited to Linux systems using RSBAC 1.2.2 or 1.2.3 with the jail feature enabled and untrusted local users present. Standard systems not using RSBAC jails are not indicated as affected by the provided sources. Treat this as a targeted legacy-platform risk. It is not evidence of broad internet exposure, but any affected system with local users could undermine jail isolation and should be reviewed during legacy Linux risk cleanup. Mitigation focus: Identify any systems running RSBAC 1.2.2 or 1.2.3.; Check RSBAC bugfixes and vendor guidance for the corrected release or patch.; Restrict untrusted local shell access on affected systems until remediated..

Prepared

Jun 30, 2026, 04:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.