Lucene search

K
cve[email protected]CVE-2007-6211
HistoryDec 04, 2007 - 1:46 a.m.

CVE-2007-6211

2007-12-0401:46:00
CWE-264
web.nvd.nist.gov
18
cve
2007
6211
icmp
nasty garbage
debian
gnu
linux
local users
arbitrary files
privileges
vulnerability
limited environments

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

Send ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to override a non-setuid default during installation.

Affected configurations

NVD
Node
debiandebian_linux
AND
singsingMatch1.1
CPENameOperatorVersion
sing:singsingeq1.1

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

Related for CVE-2007-6211