Unscored severity · published Aug 17, 2007
CVE-2007-4393
The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk partitions.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SL
Suse Linux · Suse
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4393
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4393
osvdb.org
http://osvdb.org/46403
Vendor Advisory
http://secunia.com/advisories/26395
www.novell.com
http://www.novell.com/linux/security/advisories/2007_16_sr.html
More from Suse Linux
9.8
CVE-2002-0083
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges
9.8
CVE-1999-0426
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing
8.2
CVE-2017-3224
Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber
7.8
CVE-2004-0940
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via…
7.5
CVE-2024-12087
Rsync: path traversal vulnerability in rsync