Lucene search
HistoryOct 04, 2007 - 5:17 p.m.
CVE-2007-5194
cve-2007-5194
chroot server
rmake 1.0.11
device file
permissions
local users
root privileges
nvd
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device number as /dev/port, which might allow local users to gain root privileges.
Affected configurations
Node
rpathrmakeMatch1.0.11
| CPE | Name | Operator | Version |
|---|---|---|---|
| rpath:rmake | rpath rmake | eq | 1.0.11 |
Related
nvd
nvd
CVE-2007-5194
2007-10-04 17:17:00
prion
prion
Code injection
2007-10-04 17:17:00
cvelist
cvelist
CVE-2007-5194
2007-10-04 17:00:00
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2007-5194