Unscored severity · published Oct 4, 2007
CVE-2007-5194
The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device number as /dev/port, which might allow…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device number as /dev/port, which might allow local users to gain root privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RM
Rmake · Rpath
1.0.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5194
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5194
secunia.com
http://secunia.com/advisories/27030
www.securityfocus.com
http://www.securityfocus.com/archive/1/481395/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/25899
bugs.gentoo.org
https://bugs.gentoo.org/show_bug.cgi?id=194550
issues.rpath.com
https://issues.rpath.com/browse/RMK-634