← Back

CVE-2007-5159

nvd nist
Published: Oct 1, 2007Modified: Apr 23, 2026

JSON object

Loading...
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD

Description

The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permissions (setuid root) to mount.ntfs-3g, which allows local users with fuse group membership to read from and write to arbitrary block devices, possibly involving a file descriptor leak.

Affected (2)

Products: Ntfs 3g: Ntfs 3g
Ntfs 3g
1 product
Ntfs 3g
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ntfs 3g
version ≤ 1.913-1.fc7
Running on/withPlatform Versions
Redhat
Fedora
Version 7
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ntfs 3g
All versions
Running on/withPlatform Versions
Ubuntu
Ubuntu Linux
Version 7.10

Related CWEs

CWE-264
CWE-264

References (8)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.