CVE-2007-5191

mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.

Link	Resource
http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git;a=commit;h=ebbeb2c7ac1b00b6083905957837a271e80b187e	Broken Link
https://issues.rpath.com/browse/RPL-1757	Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=320041	Issue Tracking Third Party Advisory
http://bugs.gentoo.org/show_bug.cgi?id=195390	Issue Tracking Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00144.html	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200710-18.xml	Third Party Advisory
http://frontal2.mandriva.com/en/security/advisories?name=MDKSA-2007:198	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0969.html	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html	Mailing List Third Party Advisory
http://www.ubuntu.com/usn/usn-533-1	Third Party Advisory
http://www.securityfocus.com/bid/25973	Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1018782	Third Party Advisory VDB Entry
http://secunia.com/advisories/27104	Third Party Advisory
http://secunia.com/advisories/27145	Third Party Advisory
http://secunia.com/advisories/27188	Third Party Advisory
http://secunia.com/advisories/27122	Third Party Advisory
http://secunia.com/advisories/27283	Third Party Advisory
http://secunia.com/advisories/27354	Third Party Advisory
http://secunia.com/advisories/27687	Third Party Advisory
http://secunia.com/advisories/27399	Third Party Advisory
http://www.debian.org/security/2008/dsa-1449	Third Party Advisory
http://www.debian.org/security/2008/dsa-1450	Third Party Advisory
http://secunia.com/advisories/28348	Third Party Advisory
http://secunia.com/advisories/28349	Third Party Advisory
http://lists.vmware.com/pipermail/security-announce/2008/000002.html	Third Party Advisory
http://secunia.com/advisories/28368	Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-023.htm	Third Party Advisory
http://secunia.com/advisories/28469	Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2008-0001.html	Third Party Advisory
http://www.vupen.com/english/advisories/2007/3417	Third Party Advisory
http://www.vupen.com/english/advisories/2008/0064	Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10101	Third Party Advisory
http://www.securityfocus.com/archive/1/486859/100/0/threaded	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/485936/100/0/threaded	Third Party Advisory VDB Entry

Configuration 1

cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:* cpe:2.3:a:loop-aes-utils_project:loop-aes-utils:-:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

---

Published : 2007-10-04 04:17

Updated : 2020-11-04 02:59

---

NVD link : CVE-2007-5191

Mitre link : CVE-2007-5191

No products.

CWE-696