Published: 12/09/2007 Updated: 07/11/2023

CVSS v2 Base Score: 4.4 | Impact Score: 6.4 | Exploitability Score: 3.4

VMScore: 392

Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P

JFFS2, as used on One Laptop Per Child (OLPC) build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during (1) inode creation or (2) ACL setting, which might allow local users to access restricted files or directories after a remount of a filesystem, related to "legacy modes" and an inconsistency between dentry permissions and inode permissions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
one laptop per child olpc linux build_542

The minix filesystem did not properly validate certain filesystem values If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service This was only vulnerable in Ubuntu 704 and 710 (CVE-2006-6058) ...

The minix filesystem did not properly validate certain filesystem values If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service (CVE-2006-6058) ...

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-3731 Evan Teran discovered a potential local denial of service (oops) in the handling of PTRA ...

CWE-264 http://lists.infradead.org/pipermail/linux-mtd-cvs/2007-August/005897.html http://dev.laptop.org/ticket/2732 http://www.debian.org/security/2007/dsa-1378 http://www.securityfocus.com/bid/25838 http://secunia.com/advisories/26978 http://www.ubuntu.com/usn/usn-574-1 http://secunia.com/advisories/28706 http://www.ubuntu.com/usn/usn-558-1 http://secunia.com/advisories/28170 http://git.infradead.org/?p=mtd-2.6.git%3Ba=commitdiff%3Bh=9ed437c50d89eabae763dd422579f73fdebf288d https://nvd.nist.gov https://usn.ubuntu.com/574-1/

CVE-2007-4849

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect