CVE-2007-3912

Published: Sep 10, 2007Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

checkrestart in debian-goodies before 0.34 allows local users to gain privileges via shell metacharacters in the name of the executable file for a running process.

Affected (2)

Products: Debian: Debian Goodies

Debian

1 product

Debian Goodies

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Goodies	Version 0.27
Debian Debian Goodies	Version 0.33

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-264

References (16)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=440411

Source: cve@mitre.org

Patch

http://osvdb.org/40483

Source: cve@mitre.org

http://secunia.com/advisories/26675

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27079

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1527

Source: cve@mitre.org

http://www.securityfocus.com/bid/25569

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-526-1

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/36475

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=440411