CVE

Id
23523  
CVE No.
CVE-2007-0166  
Status
Candidate  
Description
The jail rc.d script in FreeBSD 5.3 up to 6.2 does not verify pathnames when writing to /var/log/console.log during a jail start-up, or when file systems are mounted or unmounted, which allows local root users to overwrite arbitrary files, or mount/unmount files, outside of the jail via a symlink attack.  
Phase
Assigned (20070109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
227659 23523 CVE-2007-0166 FREEBSD:FreeBSD-SA-07:01  View
227660 23523 CVE-2007-0166 URL:http://security.freebsd.org/advisories/FreeBSD-SA-07:01.jail.asc  View
227661 23523 CVE-2007-0166 BID:22011  View
227662 23523 CVE-2007-0166 URL:http://www.securityfocus.com/bid/22011  View
227663 23523 CVE-2007-0166 OSVDB:32726  View
227664 23523 CVE-2007-0166 URL:http://osvdb.org/32726  View
227665 23523 CVE-2007-0166 SECTRACK:1017505  View
227666 23523 CVE-2007-0166 URL:http://securitytracker.com/id?1017505  View
227667 23523 CVE-2007-0166 SECUNIA:23730  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52669 JVNDB-2007-001361 複数の CA 製品の Tape Engine サービスにおける任意のコードを実行される脆弱性 Computer Associates (CA) BrightStor ARCserve Backup、Enterprise Backup および CA Server/Business Protection Suite の Tape Engine サービスには、直接実行されるため、任意のコードを実行される脆弱性が存在します。 CVE-2007-0168 23523 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001361.html  View