Unscored severity · published Mar 20, 2007
CVE-2007-1507
The default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid programs within the local cell, which might allow attackers to gain privileges by…
–
CVSS
2.6%
EPSS
No
On KEV
Description
The default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid programs within the local cell, which might allow attackers to gain privileges by spoofing a response to an AFS cache manager FetchStatus request, and setting setuid and root ownership for files in the cache.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openafs · Openafs
1.4.0; 1.4.1; 1.4.2; 1.4.3; 1.4.4; 1.5.0; +15 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1507
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1507
Vendor Advisory
http://secunia.com/advisories/24582
Vendor Advisory
http://secunia.com/advisories/24599
Vendor Advisory
http://secunia.com/advisories/24607
secunia.com
http://secunia.com/advisories/24720
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200704-03.xml
Vendor Advisory
http://www.debian.org/security/2007/dsa-1271
More from Openafs
9.8
CVE-2018-16947
An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2
7.8
CVE-2024-10397
A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code
7.8
CVE-2024-10394
A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number,…
7.8
CVE-2015-8312
Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system crash) via a pioctl with an input…
7.5
CVE-2019-18602
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over the network to a peer