Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-3532
HistoryJul 27, 2007 - 12:00 a.m.

CVE-2007-3532

2007-07-2700:00:00
ubuntu.com
ubuntu.com
11

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

NVIDIA drivers (nvidia-drivers) before 1.0.7185, 1.0.9639, and 100.14.11,
as used in Gentoo Linux and possibly other distributions, creates
/dev/nvidia* device files with insecure permissions, which allows local
users to modify video card settings, cause a denial of service (crash or
physical video card damage), and obtain sensitive information.

Notes

Author Note
kees the device files seem bad only on systems that are actively using the nvidia drivers.
mdeslaur dapper desktop is EOL now

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%