resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, does not properly enforce class-specific exclude rules in some situations, which allows local users to bypass intended access restrictions for USB devices that set their class ID at the interface level.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Suse_linux | Suse | 9.2 (including) | 9.2 (including) |
| Suse_linux | Suse | 9.3 (including) | 9.3 (including) |
| Resmgr | Ubuntu | dapper | * |
| Resmgr | Ubuntu | edgy | * |