CVE-2007-5191 mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers...
HighCVSS 7.2
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kernel util-linux | <= 2.13.1.1 | No fix listed |
| loop-aes-utils project loop-aes-utils | All versions | No fix listed |
| fedoraproject fedora | = 7 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 6.10 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| debian/util-linux(Debian:12) | < 2.13-8 | 2.13-8 |
| debian/util-linux(Debian:13) | < 2.13-8 | 2.13-8 |
| debian/util-linux(Debian:14) | < 2.13-8 | 2.13-8 |
References
- bugs.gentoo.org issue-tracking third-party-advisory
- MDKSA-2007:198 third-party-advisory vendor-advisory
- git.kernel.org
- SUSE-SR:2007:022 mailing-list third-party-advisory vendor-advisory
- [Security-announce] 20080107 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages mailing-list third-party-advisory
- 27104 third-party-advisory
- 27122 third-party-advisory
- 27145 third-party-advisory
- 27188 third-party-advisory
- 27283 third-party-advisory
- 27354 third-party-advisory
- 27399 third-party-advisory
- 27687 third-party-advisory
- 28348 third-party-advisory
- 28349 third-party-advisory
- 28368 third-party-advisory
- 28469 third-party-advisory
- GLSA-200710-18 third-party-advisory vendor-advisory
- support.avaya.com third-party-advisory
- DSA-1449 third-party-advisory vendor-advisory
- DSA-1450 third-party-advisory vendor-advisory
- RHSA-2007:0969 third-party-advisory vendor-advisory
- 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages mailing-list third-party-advisory vdb-entry
- 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages mailing-list third-party-advisory vdb-entry
- 25973 third-party-advisory vdb-entry
- 1018782 third-party-advisory vdb-entry
- USN-533-1 third-party-advisory vendor-advisory
- www.vmware.com third-party-advisory
- ADV-2007-3417 third-party-advisory vdb-entry
- ADV-2008-0064 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- issues.rpath.com broken-link
- oval:org.mitre.oval:def:10101 signature third-party-advisory vdb-entry
- FEDORA-2007-2462 third-party-advisory vendor-advisory
- Debian Security Tracker CVE-2007-5191 vendor-advisory