ScramDisk 4 for Linux privilege escalation

suid bit is not cleared, it's possible to mount image to system directory...

Design/Logic Flaw

ScramDisk 4 Linux before 1.0-1 does not perform permission checks on mount points, which allows local users to gain privileges by using a system directory as a mount point for a container...

Code injection

Certain programs in containers in ScramDisk 4 Linux before 1.0-1 execute with SUID permissions, which allows local users to gain privileges via mounted containers...

CVE-2007-2074

Certain programs in containers in ScramDisk 4 Linux before 1.0-1 execute with SUID permissions, which allows local users to gain privileges via mounted containers...

CVE-2007-2075

ScramDisk 4 Linux before 1.0-1 does not perform permission checks on mount points, which allows local users to gain privileges by using a system directory as a mount point for a container...

CVE-2007-2074

Certain programs in containers in ScramDisk 4 Linux before 1.0-1 execute with SUID permissions, which allows local users to gain privileges via mounted containers...

CVE-2007-2074

CVE-2007-2074 affects ScramDisk 4 Linux prior to 1.0-1. Local users may gain privileges via mounted containers because certain programs execute with SUID permissions. Root cause: SUID containers enable privilege escalation. Exploitation details are not provided in the supplied documents. No remed...