Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-3740
HistorySep 14, 2007 - 1:17 a.m.

CVE-2007-3740

2007-09-1401:17:00
CWE-264
[email protected]
web.nvd.nist.gov
43
cifs filesystem
linux kernel
umask
privilege escalation
cve-2007-3740
nvd

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.8

Confidence

Low

EPSS

0

Percentile

10.1%

JSON

The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.

Affected configurations

NVD
Node
linuxlinux_kernelRange≤2.6.21.7
OR
linuxlinux_kernelMatch2.2.27
OR
linuxlinux_kernelMatch2.4.36
OR
linuxlinux_kernelMatch2.4.36.1
OR
linuxlinux_kernelMatch2.4.36.2
OR
linuxlinux_kernelMatch2.4.36.3
OR
linuxlinux_kernelMatch2.4.36.4
OR
linuxlinux_kernelMatch2.4.36.5
OR
linuxlinux_kernelMatch2.4.36.6
OR
linuxlinux_kernelMatch2.6
OR
linuxlinux_kernelMatch2.6.18
OR
linuxlinux_kernelMatch2.6.18rc1
OR
linuxlinux_kernelMatch2.6.18rc2
OR
linuxlinux_kernelMatch2.6.18rc3
OR
linuxlinux_kernelMatch2.6.18rc4
OR
linuxlinux_kernelMatch2.6.18rc5
OR
linuxlinux_kernelMatch2.6.18rc6
OR
linuxlinux_kernelMatch2.6.18rc7
OR
linuxlinux_kernelMatch2.6.19.4
OR
linuxlinux_kernelMatch2.6.19.5
OR
linuxlinux_kernelMatch2.6.19.6
OR
linuxlinux_kernelMatch2.6.19.7
OR
linuxlinux_kernelMatch2.6.20.16
OR
linuxlinux_kernelMatch2.6.20.17
OR
linuxlinux_kernelMatch2.6.20.18
OR
linuxlinux_kernelMatch2.6.20.19
OR
linuxlinux_kernelMatch2.6.20.20
OR
linuxlinux_kernelMatch2.6.20.21
OR
linuxlinux_kernelMatch2.6.21.5
OR
linuxlinux_kernelMatch2.6.21.6
VendorProductVersionCPE
linuxlinux_kernel2.4.36.3cpe:/o:linux:linux_kernel:2.4.36.3:::
linuxlinux_kernel2.6.18cpe:/o:linux:linux_kernel:2.6.18:rc3::
linuxlinux_kernel2.6.20.17cpe:/o:linux:linux_kernel:2.6.20.17:::
linuxlinux_kernel2.6.18cpe:/o:linux:linux_kernel:2.6.18:rc1::
linuxlinux_kernel2.4.36cpe:/o:linux:linux_kernel:2.4.36:::
linuxlinux_kernel2.6.20.21cpe:/o:linux:linux_kernel:2.6.20.21:::
linuxlinux_kernel2.6.19.4cpe:/o:linux:linux_kernel:2.6.19.4:::
linuxlinux_kernel2.6.19.7cpe:/o:linux:linux_kernel:2.6.19.7:::
linuxlinux_kernel2.6.19.5cpe:/o:linux:linux_kernel:2.6.19.5:::
linuxlinux_kernel2.6.20.16cpe:/o:linux:linux_kernel:2.6.20.16:::
Rows per page:
1-10 of 301

References

Related

nvd 1
ubuntucve 1
cvelist 1
f5 2
veracode 1
prion 1
nessus 15
openvas 12
securityvulns 3
ubuntu 1
osv 3
oraclelinux 3
debian 3
suse 2
redhat 2
centos 2
nvd
nvd
CVE-2007-3740
2007-09-14 01:17:00
ubuntucve
ubuntucve
CVE-2007-3740
2007-09-14 00:00:00
cvelist
cvelist
CVE-2007-3740
2007-09-14 01:00:00
f5
f5
K8921 : Linux kernel vulnerability CVE-2007-3740
2013-03-18 00:00:00
SOL8921 - Linux kernel vulnerability CVE-2007-3740
2008-06-30 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:20:05
prion
prion
Code injection
2007-09-14 01:17:00
nessus
nessus
Ubuntu 6.06 LTS / 6.10 / 7.04 : linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20 vulnerabilities (USN-518-1)
2007-11-10 00:00:00
Debian DSA-1378-2 : linux-2.6 - several vulnerabilities
2007-10-03 00:00:00
openSUSE 10 Security Update : kernel (kernel-4752)
2008-01-08 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-518-1)
2009-03-23 00:00:00
Ubuntu Update for linux-source-2.6.15/17/20 vulnerabilities USN-518-1
2009-03-23 00:00:00
Debian Security Advisory DSA 1378-1 (linux-2.6)
2008-01-17 00:00:00
securityvulns
securityvulns
Linux kernel multiple security vulnrabilities
2008-01-13 00:00:00
[SECURITY] [DSA 1378-1] New Linux 2.6.18 packages fix several vulnerabilities
2007-09-28 00:00:00
[ MDVSA-2008:008 ] - Updated kernel packages fix multiple vulnerabilities and bugs
2008-01-13 00:00:00
ubuntu
ubuntu
linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20 vulnerabilities
2007-09-25 00:00:00
osv
osv
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
2007-09-28 00:00:00
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
2007-09-28 00:00:00
kernel-image-2.6.8 - several issues
2008-02-22 00:00:00
oraclelinux
oraclelinux
Important: kernel security update
2007-09-28 00:00:00
Important: kernel security update
2007-09-14 00:00:00
Important: kernel security update
2007-11-02 00:00:00
debian
debian
[SECURITY] [DSA 1378-1] New Linux 2.6.18 packages fix several vulnerabilities
2007-09-27 21:33:05
[SECURITY] [DSA 1378-2] New Linux 2.6.18 packages fix several vulnerabilities
2007-09-28 23:07:49
[SECURITY] [DSA 1504-1] New Linux kernel 2.6.8 packages fix several issues
2008-02-22 21:27:33
suse
suse
remote denial of service in kernel
2007-12-04 11:58:44
local privilege escalation in kernel
2008-02-07 11:18:53
redhat
redhat
(RHSA-2007:0705) Important: kernel security update
2007-09-13 00:00:00
(RHSA-2007:0939) Important: kernel security update
2007-11-01 00:00:00
centos
centos
kernel security update
2007-11-03 02:32:41
kernel security update
2007-09-14 00:58:44

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.8

Confidence

Low

EPSS

0

Percentile

10.1%

JSON
Related for CVE-2007-3740
nvd1ubuntucve1cvelist1f52veracode1prion1nessus15openvas12securityvulns3ubuntu1osv3oraclelinux3debian3suse2redhat2centos2