NVD

Id
55992  
Name
CVE-2007-3848  
Description
Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-08-14  
Modified Date
2010-08-21  
Seq
2007-3848  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
284934 55992 CVE-2007-3848 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-3848  View
284935 55992 CVE-2007-3848 SUSE-SA:2008:006  View
284936 55992 CVE-2007-3848 SUSE-SA:2008:017  View
284937 55992 CVE-2007-3848 20070814 COSEINC Linux Advisory #1: Linux Kernel Parent Process DeathSignal Vulnerability  View
284938 55992 CVE-2007-3848 [openwall-announce] 20070814 Linux 2.4.35-ow2  View
284939 55992 CVE-2007-3848 oval:org.mitre.oval:def:10120  View
284940 55992 CVE-2007-3848 http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm  View
284941 55992 CVE-2007-3848 DSA-1356  View
284942 55992 CVE-2007-3848 DSA-1503  View
284943 55992 CVE-2007-3848 DSA-1504  View
284944 55992 CVE-2007-3848 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.4  View
284945 55992 CVE-2007-3848 MDKSA-2007:195  View
284946 55992 CVE-2007-3848 MDKSA-2007:196  View
284947 55992 CVE-2007-3848 SUSE-SA:2007:053  View
284948 55992 CVE-2007-3848 RHSA-2007:0939  View
284949 55992 CVE-2007-3848 RHSA-2007:0940  View
284950 55992 CVE-2007-3848 RHSA-2007:1049  View
284951 55992 CVE-2007-3848 RHSA-2008:0787  View
284952 55992 CVE-2007-3848 20070814 COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability  View
284953 55992 CVE-2007-3848 20070814 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability  View
284954 55992 CVE-2007-3848 20070815 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability  View
284955 55992 CVE-2007-3848 20070816 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability  View
284956 55992 CVE-2007-3848 25387  View
284957 55992 CVE-2007-3848 USN-508-1  View
284958 55992 CVE-2007-3848 USN-509-1  View
284959 55992 CVE-2007-3848 USN-510-1  View
284960 55992 CVE-2007-3848 https://issues.rpath.com/browse/RPL-1648  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52208 JVNDB-2007-000898 Linux Kernel における終了シグナルの取り扱いに関する脆弱性 Linux Kernel には、プロセスが終了するシグナル (PR_SET_PDEATHSIG) の取り扱いに不備が存在するため、親プロセスが終了する際に子プロセスへ任意のシグナルを送信可能な脆弱性が存在します。 CVE-2007-3848 27203 CVE-2007-3848 55992 1.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000898.html 2007-08-14 2009-02-06 View