Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2007-5191HistoryOct 04, 2007 - 4:17 p.m.
CVE-2007-5191
2007-10-0416:17:00
Debian Security Bug Tracker
security-tracker.debian.org
13
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
29.5%
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | util-linux | < 2.13-8 | util-linux_2.13-8_all.deb |
| Debian | 11 | all | util-linux | < 2.13-8 | util-linux_2.13-8_all.deb |
| Debian | 10 | all | util-linux | < 2.13-8 | util-linux_2.13-8_all.deb |
| Debian | 999 | all | util-linux | < 2.13-8 | util-linux_2.13-8_all.deb |
| Debian | 13 | all | util-linux | < 2.13-8 | util-linux_2.13-8_all.deb |
Related
nessus
nessus
openSUSE 10 Security Update : util-linux (util-linux-4552)
2007-10-18 00:00:00
Mandrake Linux Security Advisory : util-linux (MDKSA-2007:198)
2007-10-17 00:00:00
Debian DSA-1449-1 : loop-aes-utils - programming error
2008-01-07 00:00:00
openvas
openvas
Mandriva Update for util-linux MDKSA-2007:198 (util-linux)
2009-04-09 00:00:00
Debian Security Advisory DSA 1450-1 (util-linux)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200710-18 (util-linux)
2008-09-24 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:18:03
securityvulns
securityvulns
Linux mount / umount privilege escalation
2007-10-10 00:00:00
loop-aes-utils / util-linux privilege escalation
2008-01-06 00:00:00
[SECURITY] [DSA 1450-1] New util-linux packages fix programming error
2008-01-06 00:00:00
oraclelinux
oraclelinux
Moderate: util-linux security update
2007-11-16 00:00:00
ubuntucve
ubuntucve
CVE-2007-5191
2007-10-04 00:00:00
ubuntu
ubuntu
util-linux vulnerability
2007-10-22 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: util-linux-2.13-0.54.1.fc7
2007-10-10 19:33:30
[SECURITY] Fedora Core 6 Update: util-linux-2.13-0.49.fc6
2007-10-15 19:59:34
osv
osv
loop-aes-utils privilege escalation
2008-01-05 00:00:00
util-linux privilege escalation
2008-01-05 00:00:00
prion
prion
Design/Logic Flaw
2007-10-04 16:17:00
centos
centos
losetup, mount, util security update
2007-11-15 19:24:57
cve
cve
CVE-2007-5191
2007-10-04 16:17:00
gentoo
gentoo
util-linux: Local privilege escalation
2007-10-18 00:00:00
debian
debian
[SECURITY] [DSA 1449-1] New loop-aes-utils packages fix programming error
2008-01-05 15:09:31
[SECURITY] [DSA 1450-1] New util-linux packages fix programming error
2008-01-05 15:10:06
redhat
redhat
(RHSA-2007:0969) Moderate: util-linux security update
2007-11-15 00:00:00
vmware
vmware
Updated service console patches.
2008-01-07 00:00:00
Updated service console patches.
2008-01-07 00:00:00
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
29.5%
Related for DEBIANCVE:CVE-2007-5191