Lucene search

[email protected]CVE-2007-0366

HistoryJan 19, 2007 - 9:28 p.m.

CVE-2007-0366

2007-01-1921:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-0366

rumpus

vulnerability

local users

privilege escalation

path

ipfw

nvd

6.7 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH that points to a malicious ipfw program.

CPENameOperatorVersion
maxum_development_corporation:rumpus_ftp_servermaxum development corporation rumpus ftp serverle5.1

CPE	Name	Operator	Version
maxum_development_corporation:rumpus_ftp_server	maxum development corporation rumpus ftp server	le	5.1

References

osvdb.org/32690

projects.info-pull.com/moab/MOAB-18-01-2007.html

secunia.com/advisories/23842

exchange.xforce.ibmcloud.com/vulnerabilities/31597

6.7 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2007-0366

prion1 securityvulns1