CVE-2007-2654

Published: May 14, 2007Modified: Apr 23, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.

Affected (9)

Products: Suse: Suse Linux, Opensuse, Suse Linux Openexchange Server, Suse Linux School Server, Suse Linux Standard Server, Suse Open Enterprise Server · Xfsdump: Xfsdump

6 products

Suse Linux Openexchange Server

Suse Linux School Server

Suse Linux Standard Server

Suse Open Enterprise Server

1 product

Configuration A

3 vulnerable · 22 platform

Vulnerable Software	Affected Versions
Suse Suse Linux	Version 1.0
Suse Suse Linux	Version 8
Suse Suse Linux	Version 9.0

Running on/with	Platform Versions
Suse Suse Linux	Version 10.0
Suse Suse Linux	Version 10.1
Suse Suse Linux	Version 10.1
Suse Suse Linux	Version 10.2
Suse Suse Linux	Version 10.2
Suse Suse Linux	Version 10
Suse Suse Linux	Version 10
Suse Suse Linux	Version 8.0
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.1
Suse Suse Linux	Version 9.1
Suse Suse Linux	Version 9.1
Suse Suse Linux	Version 9.2
Suse Suse Linux	Version 9.2
Suse Suse Linux	Version 9.2
Suse Suse Linux	Version 9.3
Suse Suse Linux	Version 9.3
Suse Suse Linux	Version 9.3
Suse Suse United Linux	Version 1.0

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Suse Opensuse	Version 10.2
Suse Suse Linux Openexchange Server	Version 4.0
Suse Suse Linux School Server	Version gold
Suse Suse Linux Standard Server	Version 8.0
Suse Suse Open Enterprise Server	Version 9
Xfsdump Xfsdump	Version 2.2.38

Related CWEs

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (20)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=417894

Source: cve@mitre.org

Exploit

http://osvdb.org/36716

Source: cve@mitre.org

http://secunia.com/advisories/25220

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25425

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25761

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26867

Source: cve@mitre.org

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:134

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_10_sr.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/23922

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-516-1

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=417894

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://osvdb.org/36716

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25220

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/25425

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/25761

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/26867

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:134

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2007_10_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/23922

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-516-1

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.