NVD

Id
57274  
Name
CVE-2007-5191  
Description
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-10-04  
Modified Date
2011-03-07  
Seq
2007-5191  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292438 57274 CVE-2007-5191 http://bugs.gentoo.org/show_bug.cgi?id=195390  View
292439 57274 CVE-2007-5191 MDKSA-2007:198  View
292440 57274 CVE-2007-5191 http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git;a=commit;h=ebbeb2c7ac1b00b6083905957837a271e80b187e  View
292441 57274 CVE-2007-5191 SUSE-SR:2007:022  View
292442 57274 CVE-2007-5191 [Security-announce] 20080107 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages  View
292443 57274 CVE-2007-5191 oval:org.mitre.oval:def:10101  View
292444 57274 CVE-2007-5191 GLSA-200710-18  View
292445 57274 CVE-2007-5191 http://support.avaya.com/elmodocs2/security/ASA-2008-023.htm  View
292446 57274 CVE-2007-5191 DSA-1449  View
292447 57274 CVE-2007-5191 DSA-1450  View
292448 57274 CVE-2007-5191 RHSA-2007:0969  View
292449 57274 CVE-2007-5191 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages  View
292450 57274 CVE-2007-5191 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages  View
292451 57274 CVE-2007-5191 25973  View
292452 57274 CVE-2007-5191 1018782  View
292453 57274 CVE-2007-5191 USN-533-1  View
292454 57274 CVE-2007-5191 http://www.vmware.com/security/advisories/VMSA-2008-0001.html  View
292455 57274 CVE-2007-5191 ADV-2007-3417  View
292456 57274 CVE-2007-5191 ADV-2008-0064  View
292457 57274 CVE-2007-5191 https://bugzilla.redhat.com/show_bug.cgi?id=320041  View
292458 57274 CVE-2007-5191 https://issues.rpath.com/browse/RPL-1757  View
292459 57274 CVE-2007-5191 FEDORA-2007-2462  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52299 JVNDB-2007-000989 util-linux におけるヘルパープログラムに関する権限昇格の脆弱性 util-linux には、mount および umount において、setuid() 関数/setgid() 関数を呼び出す方法、および戻り値のチェックにおいて不備があり、ヘルパープログラムの権限を適切に処理しない脆弱性が存在します。 CVE-2007-5191 28546 CVE-2007-5191 57274 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000989.html 2007-10-04 2008-01-18 View