CVE-2007-5101

UNKNOWN

ChironFS before 1

Published Sep 26, 2007

Modified 1 years ago

Details

ChironFS before 1.0 RC7 sets user/group ownership to the mounter account instead of the creator account when files are created, which allows local users to gain privileges.

References

WEB

http://code.google.com/p/chironfs/issues/detail?id=6

WEB

http://furquim.org/chironfs/Changelog.html

WEB

http://osvdb.org/40586

ADVISORY

http://secunia.com/advisories/26943

WEB

http://www.securityfocus.com/bid/25780

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/36751

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2007-5101

CVSS Analysis

CVSS v2.0

7.2

Exploitability

Access Vector

LocalAV:L

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedSep 26, 2007

ModifiedAug 7, 2024