CIFS should honor umask

🗓️ 01 Nov 2007 13:28:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 5 Views

CIFS in Linux before 2.6.22 with Unix extensions ignores process umask, allowing privilege gain.

Reporter	Title	Published	Views	Family All 180
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	4	i686	kernel	0:2.6.9-55.0.12.EL	kernel-0:2.6.9-55.0.12.EL.i686.rpm
Red Hat Enterprise Linux	4	ia64	kernel	0:2.6.9-55.0.12.EL	kernel-0:2.6.9-55.0.12.EL.ia64.rpm
Red Hat Enterprise Linux	4	ppc64	kernel	0:2.6.9-55.0.12.EL	kernel-0:2.6.9-55.0.12.EL.ppc64.rpm
Red Hat Enterprise Linux	4	ppc64iseries	kernel	0:2.6.9-55.0.12.EL	kernel-0:2.6.9-55.0.12.EL.ppc64iseries.rpm
Red Hat Enterprise Linux	4	s390	kernel	0:2.6.9-55.0.12.EL	kernel-0:2.6.9-55.0.12.EL.s390.rpm
Red Hat Enterprise Linux	4	s390x	kernel	0:2.6.9-55.0.12.EL	kernel-0:2.6.9-55.0.12.EL.s390x.rpm
Red Hat Enterprise Linux	4	x86_64	kernel	0:2.6.9-55.0.12.EL	kernel-0:2.6.9-55.0.12.EL.x86_64.rpm
Red Hat Enterprise Linux	4	i686	kernel-debuginfo	0:2.6.9-55.0.12.EL	kernel-debuginfo-0:2.6.9-55.0.12.EL.i686.rpm
Red Hat Enterprise Linux	4	ia64	kernel-debuginfo	0:2.6.9-55.0.12.EL	kernel-debuginfo-0:2.6.9-55.0.12.EL.ia64.rpm
Red Hat Enterprise Linux	4	ppc64	kernel-debuginfo	0:2.6.9-55.0.12.EL	kernel-debuginfo-0:2.6.9-55.0.12.EL.ppc64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2007-3740
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2007-3740
cve	www.cve.org/CVERecord

13 Jan 2026 20:58Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.4

EPSS0.0038

Common Internet File System Linux kernel Unix extensions process umask privilege escalation