Lucene search
UbuntuUSN-555-1HistoryDec 08, 2007 - 12:00 a.m.
e2fsprogs vulnerability
2007-12-0800:00:00
ubuntu.com
29
7.2 High
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.065 Low
EPSS
Percentile
93.7%
Releases
- Ubuntu 7.10
- Ubuntu 7.04
- Ubuntu 6.10
- Ubuntu 6.06
Packages
- e2fsprogs -
Details
Rafal Wojtczuk discovered multiple integer overflows in e2fsprogs. If a
user or automated system were tricked into fscking a malicious ext2/ext3
filesystem, a remote attacker could execute arbitrary code with the user’s
privileges.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 7.10 | noarch | e2fslibs | < 1.40.2-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | comerr-dev | < 2.1-1.40.2-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | e2fsck-static | < 1.40.2-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | e2fslibs-dev | < 1.40.2-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | e2fsprogs | < 1.40.2-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | e2fsprogs-udeb | < 1.40.2-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | libblkid-dev | < 1.40.2-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | libblkid1 | < 1.40.2-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | libblkid1-udeb | < 1.40.2-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | libcomerr2 | < 1.40.2-1ubuntu1.1 | UNKNOWN |
References
Related
nessus
nessus
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : e2fsprogs vulnerability (USN-555-1)
2007-12-11 00:00:00
Oracle Linux 3 / 4 / 5 : e2fsprogs (ELSA-2008-0003)
2013-07-12 00:00:00
SuSE9 Security Update : e2fsprogs (YOU Patch Number 12019)
2009-09-24 00:00:00
openvas
openvas
RedHat Update for e2fsprogs RHSA-2008:0003-01
2009-03-06 00:00:00
Mandriva Update for e2fsprogs MDKSA-2007:242 (e2fsprogs)
2009-04-09 00:00:00
CentOS Update for e2fsprogs CESA-2008:0003 centos4 x86_64
2009-02-27 00:00:00
freebsd
freebsd
e2fsprogs -- heap buffer overflow
2007-12-07 00:00:00
ubuntucve
ubuntucve
CVE-2007-5497
2007-12-07 00:00:00
centos
centos
e2fsprogs security update
2008-01-08 15:52:54
e2fsprogs security update
2008-01-13 02:23:09
debian
debian
[SECURITY] [DSA 1422-1] New e2fsprogs packages fix arbitrary code execution
2007-12-07 13:21:05
oraclelinux
oraclelinux
Moderate: e2fsprogs security update
2008-01-07 00:00:00
redhat
redhat
(RHSA-2008:0003) Moderate: e2fsprogs security update
2008-01-07 00:00:00
debiancve
debiancve
CVE-2007-5497
2007-12-07 11:46:00
fedora
fedora
[SECURITY] Fedora 7 Update: e2fsprogs-1.40.2-3.fc7
2008-01-19 00:00:25
[SECURITY] Fedora 8 Update: e2fsprogs-1.40.2-12.fc8
2008-01-18 23:57:39
securityvulns
securityvulns
e2fsprogs utilities multiple security vulnerabilities
2007-12-09 00:00:00
[SECURITY] [DSA 1422-1] New e2fsprogs packages fix arbitrary code execution
2007-12-09 00:00:00
prion
prion
Integer overflow
2007-12-07 11:46:00
cve
cve
CVE-2007-5497
2007-12-07 11:46:00
gentoo
gentoo
E2fsprogs: Multiple buffer overflows
2007-12-18 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:20:56
vmware
vmware
Updated e2fsprogs service console package
2008-03-03 00:00:00
Updated e2fsprogs service console package
2008-03-03 00:00:00
7.2 High
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.065 Low
EPSS
Percentile
93.7%
Related for USN-555-1