NVD

Id
53555  
Name
CVE-2007-1370  
Description
Zend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which allows local users to gain root privileges by modifying the files. NOTE: this only occurs when safe_mode and open_basedir are disabled; other settings require leverage for other vulnerabilities.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-03-09  
Modified Date
2011-03-07  
Seq
2007-1370  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271383 53555 CVE-2007-1370 http://www.php-security.org/MOPB/BONUS-06-2007.html  View
271384 53555 CVE-2007-1370 22801  View
271385 53555 CVE-2007-1370 ADV-2007-0829  View
271386 53555 CVE-2007-1370 http://www.zend.com/products/zend_platform/security_vulnerabilities  View
271387 53555 CVE-2007-1370 zend-scd-privilege-escalation(32825)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56532 JVNDB-2007-005224 Zend Platform におけるルート権限を取得される脆弱性 Zend Platform は、scd.sh および他の特定ファイルが間違ったオーナーシップを所持するため、ルート権限を取得される脆弱性が存在します。 CVE-2007-1370 24725 CVE-2007-1370 53555 6.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005224.html 2007-03-09 2012-12-20 View