Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-4308
HistoryAug 13, 2007 - 9:17 p.m.

CVE-2007-4308

2007-08-1321:17:00
[email protected]
web.nvd.nist.gov
10

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0

Percentile

10.1%

JSON

The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.

Affected configurations

Nvd
Node
linuxlinux_kernelMatch2.6.23rc1
AND
adaptecaacraid_controller

References

Related

prion 1
securityvulns 1
cve 1
veracode 1
ubuntucve 1
cvelist 1
vmware 2
nessus 25
openvas 35
osv 4
debian 4
suse 3
centos 4
oraclelinux 3
redhat 5
ubuntu 3
prion
prion
Path traversal
2007-08-13 21:17:00
securityvulns
securityvulns
Linux aacraid driver IOCTL privilege escalation
2007-08-31 00:00:00
cve
cve
CVE-2007-4308
2007-08-13 21:17:00
veracode
veracode
Privilege Escalation
2020-04-10 00:21:25
ubuntucve
ubuntucve
CVE-2007-4308
2007-08-13 00:00:00
cvelist
cvelist
CVE-2007-4308
2007-08-13 21:00:00
vmware
vmware
Updated aacraid driver and Samba and Python service console updates
2008-02-04 00:00:00
Updated aacraid driver and Samba and Python service console updates
2008-02-04 00:00:00
nessus
nessus
VMSA-2008-0003 : Moderate: Updated aacraid driver and samba and python Service Console updates
2009-07-27 00:00:00
Debian DSA-1363-1 : linux-2.6 - several vulnerabilities
2007-09-03 00:00:00
CentOS 3 : kernel (CESA-2007:1049)
2007-12-04 00:00:00
openvas
openvas
SuSE Update for kernel SUSE-SA:2008:017
2009-01-23 00:00:00
RedHat Update for kernel RHSA-2007:1049-01
2009-03-06 00:00:00
CentOS Update for kernel CESA-2007:1049 centos3 i386
2009-02-27 00:00:00
osv
osv
linux-2.6
2007-08-31 00:00:00
kernel-image-2.6.8 - several issues
2008-02-22 00:00:00
kernel-source-2.4.27 - several vulnerabilities
2008-02-22 00:00:00
debian
debian
[SECURITY] [DSA 1363-1] New Linux 2.6.18 packages fix several vulnerabilities
2007-08-31 23:33:55
[SECURITY] [DSA 1503-1] New Linux kernel 2.4.27 packages fix several issues
2008-02-22 20:55:49
[SECURITY] [DSA 1503-2] New Linux kernel 2.4.27 packages fix several issues
2008-03-06 07:47:54
suse
suse
remote denial of service in kernel
2008-03-28 14:11:32
remote denial of service in kernel
2007-12-04 11:58:44
local privilege escalation in kernel
2008-02-07 11:18:53
centos
centos
kernel security update
2007-12-03 19:44:42
kernel security update
2007-11-03 02:32:41
kernel security update
2007-10-23 22:22:36
oraclelinux
oraclelinux
Important: kernel security and bug fix update
2007-12-04 00:00:00
Important: kernel security update
2007-11-02 00:00:00
Important:kernel security update
2007-10-23 00:00:00
redhat
redhat
(RHSA-2007:1049) Important: kernel security and bug fix update
2007-12-03 00:00:00
(RHSA-2007:0939) Important: kernel security update
2007-11-01 00:00:00
(RHSA-2007:0940) Important: kernel security update
2007-10-22 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2007-08-30 00:00:00
Linux kernel vulnerabilities
2007-08-31 00:00:00
Linux kernel vulnerabilities
2007-08-31 00:00:00

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0

Percentile

10.1%

JSON
Related for NVD:CVE-2007-4308
prion1securityvulns1cve1veracode1ubuntucve1cvelist1vmware2nessus25openvas35osv4debian4suse3centos4oraclelinux3redhat5ubuntu3