CVE-2007-1738 TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service (filesystem unavailability) or gain privileges by mounting a crafted TrueCrypt volume, as demonstrated using....
MediumCVSS 6.9
EPSS 0.67%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service (filesystem unavailability) or gain privileges by mounting a crafted TrueCrypt volume, as demonstrated using (1) /usr/bin or (2) another user's home directory, a different issue than CVE-2007-1589.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| truecrypt foundation truecrypt | = 3.0 | No fix listed |
| truecrypt foundation truecrypt | = 4.0 | No fix listed |
| truecrypt foundation truecrypt | = 4.1 | No fix listed |
| truecrypt foundation truecrypt | = 4.2 | No fix listed |
| truecrypt foundation truecrypt | = 4.3 | No fix listed |
References
- 24643 third-party-advisory vendor-advisory
- 2492 third-party-advisory
- 20070328 Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180) mailing-list
- 20070401 Re: Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180) mailing-list
- 20070404 Re: Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180) mailing-list
- 23180 vdb-entry
- truecrypt-setuid-dos(33303) vdb-entry