CVE-2007-5191

Published: Oct 4, 2007Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.

Affected (7)

Products: Kernel: Util Linux · Loop Aes Utils Project: Loop Aes Utils · Fedoraproject: Fedora · +2 more

Show all products

Kernel: Util Linux · Loop Aes Utils Project: Loop Aes Utils · Fedoraproject: Fedora · Canonical: Ubuntu Linux · Debian: Debian Linux

Kernel

1 product

Util Linux

Loop Aes Utils Project

1 product

1 product

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Kernel Util Linux	Up to 2.13.1.1
Loop Aes Utils Project Loop Aes Utils	All versions

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 7

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10
Canonical Ubuntu Linux	Version 7.04

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1

Related CWEs

CWE-252

Unchecked Return Value

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

References (68)

http://bugs.gentoo.org/show_bug.cgi?id=195390

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://frontal2.mandriva.com/en/security/advisories?name=MDKSA-2007:198

Source: secalert@redhat.com

Third Party Advisory

http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=ebbeb2c7ac1b00b6083905957837a271e80b187e

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.vmware.com/pipermail/security-announce/2008/000002.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/27104

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/27122

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/27145

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/27188

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/27283

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/27354

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/27399

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/27687

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/28348

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/28349

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/28368

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/28469

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200710-18.xml

Source: secalert@redhat.com

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2008-023.htm

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2008/dsa-1449

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2008/dsa-1450

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0969.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/485936/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/486859/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/25973

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1018782

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-533-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2008-0001.html

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2007/3417

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2008/0064

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=320041

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://issues.rpath.com/browse/RPL-1757

Source: secalert@redhat.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10101

Source: secalert@redhat.com

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00144.html

Source: secalert@redhat.com

Third Party Advisory

http://bugs.gentoo.org/show_bug.cgi?id=195390