NVD

Id
52697  
Name
CVE-2007-0473  
Description
The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information (/etc/sudoers contents) by reading this file.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-02-03  
Modified Date
2011-03-07  
Seq
2007-0473  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266349 52697 CVE-2007-0473 http://developer.berlios.de/bugs/?func=detailbug&bug_id=9630&group_id=769  View
266350 52697 CVE-2007-0473 http://developer.berlios.de/project/shownotes.php?release_id=11706  View
266351 52697 CVE-2007-0473 http://developer.berlios.de/project/shownotes.php?release_id=11902  View
266352 52697 CVE-2007-0473 http://developer.berlios.de/project/shownotes.php?release_id=9777  View
266353 52697 CVE-2007-0473 SUSE-SR:2007:002  View
266354 52697 CVE-2007-0473 GLSA-200703-09  View
266355 52697 CVE-2007-0473 MDKSA-2007:042  View
266356 52697 CVE-2007-0473 22299  View
266357 52697 CVE-2007-0473 ADV-2007-0393  View
266358 52697 CVE-2007-0473 [smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56297 JVNDB-2007-004989 Smb4K の core/smb4kfileio.cpp における重要な情報を取得される脆弱性 Smb4K の core/smb4kfileio.cpp の writeFile 関数は、変更作業中に /etc/sudoers パーミッションを維持しないため、重要な情報 (/etc/sudoers のコンテンツ) を取得される脆弱性が存在します。 CVE-2007-0473 23828 CVE-2007-0473 52697 1.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004989.html 2007-02-03 2012-12-20 View