CVE-2007-3912

checkrestart in debian-goodies before 0.34 allows local users to gain privileges via shell metacharacters in the name of the executable file for a running process.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:debian:debian-goodies:0.27:*:*:*:*:*:*:*
cpe:2.3:a:debian:debian-goodies:0.33:*:*:*:*:*:*:*

History

21 Nov 2024, 00:34

Type Values Removed Values Added
References () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=440411 - Patch () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=440411 - Patch
References () http://osvdb.org/40483 - () http://osvdb.org/40483 -
References () http://secunia.com/advisories/26675 - Vendor Advisory () http://secunia.com/advisories/26675 - Vendor Advisory
References () http://secunia.com/advisories/27079 - () http://secunia.com/advisories/27079 -
References () http://www.debian.org/security/2008/dsa-1527 - () http://www.debian.org/security/2008/dsa-1527 -
References () http://www.securityfocus.com/bid/25569 - () http://www.securityfocus.com/bid/25569 -
References () http://www.ubuntu.com/usn/usn-526-1 - () http://www.ubuntu.com/usn/usn-526-1 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/36475 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/36475 -

Information

Published : 2007-09-10 17:17

Updated : 2024-11-21 00:34


NVD link : CVE-2007-3912

Mitre link : CVE-2007-3912

CVE.ORG link : CVE-2007-3912


JSON object : View

Products Affected

debian

  • debian-goodies
CWE
CWE-20

Improper Input Validation

CWE-264

Permissions, Privileges, and Access Controls