CVE-2007-5191

Опубликовано: 04 окт. 2007

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.

Ссылки

http://bugs.gentoo.org/show_bug.cgi?id=195390
Issue Tracking
Third Party Advisory
http://frontal2.mandriva.com/en/security/advisories?name=MDKSA-2007:198
Third Party Advisory
http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=ebbeb2c7ac1b00b6083905957837a271e80b187e
http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html
Mailing List
Third Party Advisory
http://lists.vmware.com/pipermail/security-announce/2008/000002.html
Third Party Advisory
http://secunia.com/advisories/27104
Third Party Advisory
http://secunia.com/advisories/27122
Third Party Advisory
http://secunia.com/advisories/27145
Third Party Advisory
http://secunia.com/advisories/27188
Third Party Advisory
http://secunia.com/advisories/27283
Third Party Advisory
http://secunia.com/advisories/27354
Third Party Advisory
http://secunia.com/advisories/27399
Third Party Advisory
http://secunia.com/advisories/27687
Third Party Advisory
http://secunia.com/advisories/28348
Third Party Advisory
http://secunia.com/advisories/28349
Third Party Advisory
http://secunia.com/advisories/28368
Third Party Advisory
http://secunia.com/advisories/28469
Third Party Advisory
http://security.gentoo.org/glsa/glsa-200710-18.xml
Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-023.htm
Third Party Advisory
http://www.debian.org/security/2008/dsa-1449
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*

Версия до 2.13.1.1 (включая)

cpe:2.3:a:loop-aes-utils_project:loop-aes-utils:-:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.00097

Низкий

7.2 High

CVSS2

Дефекты

CWE-252

Связанные уязвимости

CVE-2007-5191

ubuntu

почти 18 лет назад

CVE-2007-5191

redhat

почти 18 лет назад

CVE-2007-5191

debian

почти 18 лет назад

mount and umount in util-linux and loop-aes-utils call the setuid and ...

GHSA-x6mx-7fcg-2j6w

github

больше 3 лет назад

BDU:2015-09606

fstec

почти 18 лет назад

Уязвимость операционной системы Gentoo Linux, позволяющая злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 28%

0.00097

Низкий

7.2 High

CVSS2

Дефекты

CWE-252