CVE-2007-1738

2007-03-2822:19:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

truecrypt

cve-2007-1738

denial of service

privilege escalation

6.6 Medium

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.9%

JSON

TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service (filesystem unavailability) or gain privileges by mounting a crafted TrueCrypt volume, as demonstrated using (1) /usr/bin or (2) another user’s home directory, a different issue than CVE-2007-1589.

CPENameOperatorVersion
truecrypt_foundation:truecrypttruecrypt foundation truecrypteq4.0
truecrypt_foundation:truecrypttruecrypt foundation truecrypteq4.3
truecrypt_foundation:truecrypttruecrypt foundation truecrypteq3.0
truecrypt_foundation:truecrypttruecrypt foundation truecrypteq4.2
truecrypt_foundation:truecrypttruecrypt foundation truecrypteq4.1

CPE	Name	Operator	Version
truecrypt_foundation:truecrypt	truecrypt foundation truecrypt	eq	4.0
truecrypt_foundation:truecrypt	truecrypt foundation truecrypt	eq	4.3
truecrypt_foundation:truecrypt	truecrypt foundation truecrypt	eq	3.0
truecrypt_foundation:truecrypt	truecrypt foundation truecrypt	eq	4.2
truecrypt_foundation:truecrypt	truecrypt foundation truecrypt	eq	4.1