VulnerabilityModified
CVE-2007-5191
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
HIGH 7.2EPSS 0.44%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.44%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 0.44% probability · 37th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-252
- Affected
- kernel/util-linux · loop-aes-utils project/loop-aes-utils · fedoraproject/fedora · canonical/ubuntu linux · debian/debian linux
- Source
- secalert@redhat.com
References
- http://bugs.gentoo.org/show_bug.cgi?id=195390Issue Tracking, Third Party Advisory
- http://frontal2.mandriva.com/en/security/advisories?name=MDKSA-2007:198Third Party Advisory
- http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=ebbeb2c7ac1b00b6083905957837a271e80b187e
- http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.htmlMailing List, Third Party Advisory
- http://lists.vmware.com/pipermail/security-announce/2008/000002.htmlThird Party Advisory
- http://secunia.com/advisories/27104Third Party Advisory
- http://secunia.com/advisories/27122Third Party Advisory
- http://secunia.com/advisories/27145Third Party Advisory
- http://secunia.com/advisories/27188Third Party Advisory
- http://secunia.com/advisories/27283Third Party Advisory
- http://secunia.com/advisories/27354Third Party Advisory
- http://secunia.com/advisories/27399Third Party Advisory
- http://secunia.com/advisories/27687Third Party Advisory
- http://secunia.com/advisories/28348Third Party Advisory
- http://secunia.com/advisories/28349Third Party Advisory
- http://secunia.com/advisories/28368Third Party Advisory
- http://secunia.com/advisories/28469Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200710-18.xmlThird Party Advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-023.htmThird Party Advisory
- http://www.debian.org/security/2008/dsa-1449Third Party Advisory
- http://www.debian.org/security/2008/dsa-1450Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0969.htmlThird Party Advisory
- http://www.securityfocus.com/archive/1/485936/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/486859/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/25973Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1018782Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-533-1Third Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0001.htmlThird Party Advisory
- http://www.vupen.com/english/advisories/2007/3417Third Party Advisory
- http://www.vupen.com/english/advisories/2008/0064Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.