CVE

Id
23830  
CVE No.
CVE-2007-0473  
Status
Candidate  
Description
The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information (/etc/sudoers contents) by reading this file.  
Phase
Assigned (20070124)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
231936 23830 CVE-2007-0473 MLIST:[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released  View
231937 23830 CVE-2007-0473 URL:https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html  View
231938 23830 CVE-2007-0473 CONFIRM:http://developer.berlios.de/bugs/?func=detailbug&bug_id=9630&group_id=769  View
231939 23830 CVE-2007-0473 CONFIRM:http://developer.berlios.de/project/shownotes.php?release_id=11706  View
231940 23830 CVE-2007-0473 CONFIRM:http://developer.berlios.de/project/shownotes.php?release_id=11902  View
231941 23830 CVE-2007-0473 CONFIRM:http://developer.berlios.de/project/shownotes.php?release_id=9777  View
231942 23830 CVE-2007-0473 GENTOO:GLSA-200703-09  View
231943 23830 CVE-2007-0473 URL:http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml  View
231944 23830 CVE-2007-0473 MANDRIVA:MDKSA-2007:042  View
231945 23830 CVE-2007-0473 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:042  View
231946 23830 CVE-2007-0473 SUSE:SUSE-SR:2007:002  View
231947 23830 CVE-2007-0473 URL:http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html  View
231948 23830 CVE-2007-0473 BID:22299  View
231949 23830 CVE-2007-0473 URL:http://www.securityfocus.com/bid/22299  View
231950 23830 CVE-2007-0473 VUPEN:ADV-2007-0393  View
231951 23830 CVE-2007-0473 URL:http://www.vupen.com/english/advisories/2007/0393  View
231952 23830 CVE-2007-0473 SECUNIA:23937  View
231953 23830 CVE-2007-0473 URL:http://secunia.com/advisories/23937  View
231954 23830 CVE-2007-0473 SECUNIA:23984  View
231955 23830 CVE-2007-0473 URL:http://secunia.com/advisories/23984  View
231956 23830 CVE-2007-0473 SECUNIA:24111  View
231957 23830 CVE-2007-0473 URL:http://secunia.com/advisories/24111  View
231958 23830 CVE-2007-0473 SECUNIA:24469  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56299 JVNDB-2007-004991 Smb4K の utilities/smb4k_*.cpp におけるスタックベースのバッファオーバーフローの脆弱性 Smb4K の utilities/smb4k_*.cpp は、Smb4K sudoers リスト上に存在する際、sudo 設定と矛盾する args 変数など、不特定の変数に関する処理に不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-0475 23830 4.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004991.html  View