CVE-2007-2654

xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.

Link	Resource
http://www.novell.com/linux/security/advisories/2007_10_sr.html	Vendor Advisory
http://www.securityfocus.com/bid/23922
http://secunia.com/advisories/25220	Vendor Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=417894	Exploit
http://www.mandriva.com/security/advisories?name=MDKSA-2007:134
http://www.ubuntu.com/usn/usn-516-1
http://secunia.com/advisories/25425	Vendor Advisory
http://secunia.com/advisories/25761	Vendor Advisory
http://secunia.com/advisories/26867	Vendor Advisory
http://osvdb.org/36716

Configuration 1

cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:* cpe:2.3:o:suse:suse_linux:8.0:*:retail_solution:*:*:*:*:* cpe:2.3:o:suse:suse_linux:9.0:*:personal:*:*:*:*:* cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:* cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:suse:suse_linux:10.2:*:x86_64:*:*:*:*:* cpe:2.3:o:suse:suse_linux:10.0:*:oss:*:*:*:*:* cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:* cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:* cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:* cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:* cpe:2.3:o:suse:suse_linux:10.2:*:professional:*:*:*:*:* cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:* cpe:2.3:o:suse:suse_linux:10:*:enterprise_server:*:*:*:*:* cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:* cpe:2.3:o:suse:suse_linux:10.1:*:professional:*:*:*:*:* cpe:2.3:o:suse:suse_linux:10.1:*:personal:*:*:*:*:* cpe:2.3:o:suse:suse_linux:10:*:enterprise_desktop:*:*:*:*:* cpe:2.3:o:suse:suse_linux:9.0:*:professional:*:*:*:*:* cpe:2.3:o:suse:suse_linux:9.1:*:professional:*:*:*:*:* cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:* cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:* cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:* cpe:2.3:o:suse:suse_united_linux:1.0:*:*:*:*:*:*:* cpe:2.3:o:suse:suse_linux:9.1:*:personal:*:*:*:*:* cpe:2.3:a:suse:suse_linux_standard_server:8.0:*:*:*:*:*:*:* cpe:2.3:a:suse:suse_linux_school_server:gold:*:i386:*:*:*:*:* cpe:2.3:o:suse:opensuse:10.2:*:*:*:*:*:*:* cpe:2.3:a:suse:suse_linux_openexchange_server:4.0:*:*:*:*:*:*:* cpe:2.3:a:xfsdump:xfsdump:2.2.38:*:*:*:*:*:*:* cpe:2.3:a:suse:suse_open_enterprise_server:9:*:*:*:*:*:*:*

---

Published : 2007-05-14 09:19

Updated : 2008-11-13 05:00

---

NVD link : CVE-2007-2654

Mitre link : CVE-2007-2654

No products.

CWE-362