CVE-2007-1588

Published: Mar 21, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

server.cpp in MyServer 0.8.5 calls Process::setuid before calling Process::setgid and thus does not properly drop privileges, which might allow remote attackers to execute CGI programs with unintended privileges.

Affected (1)

Products: Myserver: Myserver

Myserver

1 product

Myserver

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Myserver Myserver	Version 0.8.5

References (6)

http://osvdb.org/34521

Source: cve@mitre.org

http://sourceforge.net/mailarchive/forum.php?thread_id=31631045&forum_id=47875

Source: cve@mitre.org

Patch

http://www.myserverproject.net/news.php

Source: cve@mitre.org

Vendor Advisory

http://osvdb.org/34521

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/mailarchive/forum.php?thread_id=31631045&forum_id=47875

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.myserverproject.net/news.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.