Lucene search
HistoryJul 21, 2007 - 12:30 a.m.
CVE-2007-3931
cve-2007-3931
samsung
scx-4200
driver
setuid
permissions
installation
script
vulnerability
nvd
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
The wrap_setuid_third_party_application function in the installation script for the Samsung SCX-4200 Driver 2.00.95 adds setuid permissions to third party applications such as xsane and xscanimage, which allows local users to gain privileges.
Affected configurations
Node
samsungscx-4200_driverMatch2.00.95
| CPE | Name | Operator | Version |
|---|---|---|---|
| samsung:scx-4200_driver | samsung scx-4200 driver | eq | 2.00.95 |
Related
nvd
nvd
CVE-2007-3931
2007-07-21 00:30:00
prion
prion
Design/Logic Flaw
2007-07-21 00:30:00
cvelist
cvelist
CVE-2007-3931
2007-07-21 00:00:00
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2007-3931