NVD

Id
55887  
Name
CVE-2007-3740  
Description
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-09-13  
Modified Date
2012-03-19  
Seq
2007-3740  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
284243 55887 CVE-2007-3740 SUSE-SA:2007:064  View
284244 55887 CVE-2007-3740 SUSE-SA:2008:006  View
284245 55887 CVE-2007-3740 oval:org.mitre.oval:def:9953  View
284246 55887 CVE-2007-3740 http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm  View
284247 55887 CVE-2007-3740 DSA-1378  View
284248 55887 CVE-2007-3740 DSA-1504  View
284249 55887 CVE-2007-3740 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22  View
284250 55887 CVE-2007-3740 MDVSA-2008:008  View
284251 55887 CVE-2007-3740 MDVSA-2008:105  View
284252 55887 CVE-2007-3740 RHSA-2007:0705  View
284253 55887 CVE-2007-3740 RHSA-2007:0939  View
284254 55887 CVE-2007-3740 25672  View
284255 55887 CVE-2007-3740 USN-518-1  View
284256 55887 CVE-2007-3740 kernel-cifs-filesystem-dos(36593)  View
284257 55887 CVE-2007-3740 https://bugzilla.redhat.com/show_bug.cgi?id=253314  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52028 JVNDB-2007-000691 Linux Kernel の CIFS ファイルシステムにおける権限昇格の脆弱性 Linux Kernel には、CIFS ファイルシステムで、Unix 拡張をサポートを有効にしている場合、プロセスの umask を適切に処理しないため、権限昇格の脆弱性が存在します。 CVE-2007-3740 27095 CVE-2007-3740 55887 6.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000691.html 2007-09-13 2007-12-19 View