Unscored severity · published Oct 4, 2007
CVE-2007-5191
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain…
–
CVSS
0.4%
EPSS
No
On KEV
Description
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
3.1 · source: NVD
FE
Fedora · Fedoraproject
7 · source: NVD
LO
Loop-aes-utils · Loop-aes-utils Project
All versions, or not specified · source: NVD
UL
Ubuntu Linux · Canonical
6.06; 6.10; 7.04 · source: NVD
UT
Util-linux · Kernel
through 2.13.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5191
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5191
Issue Tracking
http://bugs.gentoo.org/show_bug.cgi?id=195390
Third Party Advisory
http://frontal2.mandriva.com/en/security/advisories?name=MDKSA-2007:198
git.kernel.org
http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=ebbeb2c7ac1b00b6083905957837a271e80b187e
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html
Third Party Advisory
http://lists.vmware.com/pipermail/security-announce/2008/000002.html
Third Party Advisory
http://secunia.com/advisories/27104
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation