CVE-2007-3740

Published: Sep 14, 2007Modified: Apr 23, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.

Affected (30)

Products: Linux: Linux Kernel

1 product

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.21.7
Linux Linux Kernel	Version 2.2.27
Linux Linux Kernel	Version 2.4.36.1
Linux Linux Kernel	Version 2.4.36.2
Linux Linux Kernel	Version 2.4.36.3
Linux Linux Kernel	Version 2.4.36.4
Linux Linux Kernel	Version 2.4.36.5
Linux Linux Kernel	Version 2.4.36.6
Linux Linux Kernel	Version 2.4.36
Linux Linux Kernel	Version 2.6.18
Linux Linux Kernel	Version 2.6.18 rc1
Linux Linux Kernel	Version 2.6.18 rc2
Linux Linux Kernel	Version 2.6.18 rc3
Linux Linux Kernel	Version 2.6.18 rc4
Linux Linux Kernel	Version 2.6.18 rc5
Linux Linux Kernel	Version 2.6.18 rc6
Linux Linux Kernel	Version 2.6.18 rc7
Linux Linux Kernel	Version 2.6.19.4
Linux Linux Kernel	Version 2.6.19.5
Linux Linux Kernel	Version 2.6.19.6
Linux Linux Kernel	Version 2.6.19.7
Linux Linux Kernel	Version 2.6.20.16
Linux Linux Kernel	Version 2.6.20.17
Linux Linux Kernel	Version 2.6.20.18
Linux Linux Kernel	Version 2.6.20.19
Linux Linux Kernel	Version 2.6.20.20
Linux Linux Kernel	Version 2.6.20.21
Linux Linux Kernel	Version 2.6.21.5
Linux Linux Kernel	Version 2.6.21.6
Linux Linux Kernel	Version 2.6

Related CWEs

References (46)

http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html

Source: secalert@redhat.com

http://secunia.com/advisories/26760

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26955

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26978

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27436

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27747

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27912

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28806

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29058

Source: secalert@redhat.com

Vendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1378

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1504

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:008

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:105

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0705.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0939.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/25672

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-518-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=253314

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/36593

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9953

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26760

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/26955

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/26978

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/27436

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/27747

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/27912

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/28806

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/29058

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1378

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1504

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:008

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:105

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-0705.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-0939.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25672

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-518-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=253314

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/36593

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9953

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.