| ID |
CVE-2007-6733
|
| Summary |
The nfs_lock function in fs/nfs/file.c in the Linux kernel 2.6.9 does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a denial of service (BUG and system crash) by locking a file on an NFS filesystem and then changing this file's permissions, a related issue to CVE-2010-0727. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 4.7 (as of 19-03-2012 - 04:00) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-399 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| LOCAL |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
COMPLETE |
|
| cvss-vector
via4
|
AV:L/AC:M/Au:N/C:N/I:N/A:C
|
| redhat
via4
|
|
| refmap
via4
|
|
| Last major update |
19-03-2012 - 04:00 |
| Published |
16-03-2010 - 19:30 |
| Last modified |
19-03-2012 - 04:00 |
