Vulnerability-Lookup

CVE-2007-0472 (GCVE-0-2007-0472)

Vulnerability from cvelistv5 – Published: 2007-02-03 23:00 – Updated: 2024-08-07 12:19

Summary

Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.

Severity

No CVSS data available.

CWE

Assigner

canonical mitre root

References

14 references

URL	Tags
http://secunia.com/advisories/23984	third-party-advisoryx_refsource_SECUNIA
https://lists.berlios.de/pipermail/smb4k-announce…	mailing-listx_refsource_MLIST
http://lists.suse.com/archive/suse-security-annou…	vendor-advisoryx_refsource_SUSE
http://developer.berlios.de/project/shownotes.php…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/22299	vdb-entryx_refsource_BID
http://secunia.com/advisories/24111	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24469	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/0393	vdb-entryx_refsource_VUPEN
http://www.gentoo.org/security/en/glsa/glsa-20070…	vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/23937	third-party-advisoryx_refsource_SECUNIA
http://developer.berlios.de/project/shownotes.php…	x_refsource_CONFIRM
http://developer.berlios.de/project/shownotes.php…	x_refsource_CONFIRM
http://developer.berlios.de/bugs/?func=detailbug&…	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA

Date Public

2006-12-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:19:30.081Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "23984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23984"
          },
          {
            "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
          },
          {
            "name": "SUSE-SR:2007:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
          },
          {
            "name": "22299",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22299"
          },
          {
            "name": "24111",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24111"
          },
          {
            "name": "24469",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24469"
          },
          {
            "name": "ADV-2007-0393",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0393"
          },
          {
            "name": "GLSA-200703-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
          },
          {
            "name": "23937",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23937"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
          },
          {
            "name": "MDKSA-2007:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-12-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-02-09T10:00:00.000Z",
        "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "shortName": "canonical"
      },
      "references": [
        {
          "name": "23984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23984"
        },
        {
          "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
        },
        {
          "name": "SUSE-SR:2007:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
        },
        {
          "name": "22299",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22299"
        },
        {
          "name": "24111",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24111"
        },
        {
          "name": "24469",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24469"
        },
        {
          "name": "ADV-2007-0393",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0393"
        },
        {
          "name": "GLSA-200703-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
        },
        {
          "name": "23937",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23937"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
        },
        {
          "name": "MDKSA-2007:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@ubuntu.com",
          "ID": "CVE-2007-0472",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "23984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23984"
            },
            {
              "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
              "refsource": "MLIST",
              "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
            },
            {
              "name": "SUSE-SR:2007:002",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
            },
            {
              "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
              "refsource": "CONFIRM",
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
            },
            {
              "name": "22299",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22299"
            },
            {
              "name": "24111",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24111"
            },
            {
              "name": "24469",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24469"
            },
            {
              "name": "ADV-2007-0393",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0393"
            },
            {
              "name": "GLSA-200703-09",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
            },
            {
              "name": "23937",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23937"
            },
            {
              "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
              "refsource": "CONFIRM",
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
            },
            {
              "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
              "refsource": "CONFIRM",
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
            },
            {
              "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769",
              "refsource": "CONFIRM",
              "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
            },
            {
              "name": "MDKSA-2007:042",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
    "assignerShortName": "canonical",
    "cveId": "CVE-2007-0472",
    "datePublished": "2007-02-03T23:00:00.000Z",
    "dateReserved": "2007-01-24T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:19:30.081Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-0472",
      "date": "2026-09-19",
      "epss": "0.00352",
      "percentile": "0.28945"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:smb4k:smb4k:0.4:*:*:*:*:*:*:*",
                  "matchCriteriaId": "ADAA1F65-4E7C-4D07-84C5-E104D6B680A2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:smb4k:smb4k:0.5:*:*:*:*:*:*:*",
                  "matchCriteriaId": "117FD513-0BA4-4B76-B865-7DCD2D8C3CC0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:smb4k:smb4k:0.6:*:*:*:*:*:*:*",
                  "matchCriteriaId": "CDC98527-69EE-425C-B563-320F5A731FB8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:smb4k:smb4k:0.7:*:*:*:*:*:*:*",
                  "matchCriteriaId": "28CDB015-89C9-4086-B29F-444C115C050E",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp."
        },
        {
          "lang": "es",
          "value": "M\u00faltiples condiciones de carrera en Smb4K anterior a 0.8.0 permite a usuarios locales (1) modificar archivos de su elecci\u00f3n a trav\u00e9s manipulaciones no especificas del archivo de cierre Smb4K\u0027s, el cual no se maneja adecuadamente por la funci\u00f3n remove_lock_file en core/smb4kfileio.cpp, y (2) a\u00f1adir lineas en el archivo sudoers a trav\u00e9s de un ataque de enlaces simb\u00f3licos sobre archivos temporales, lo cual no es manejado de forma adecuada por la funci\u00f3n writeFile en core/smb4kfileio.cpp."
        }
      ],
      "id": "CVE-2007-0472",
      "lastModified": "2024-11-21T00:25:57.077",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "LOW",
            "cvssData": {
              "accessComplexity": "HIGH",
              "accessVector": "LOCAL",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 3.7,
              "confidentialityImpact": "PARTIAL",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 1.9,
            "impactScore": 6.4,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": true,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2007-02-03T23:28:00.000",
      "references": [
        {
          "source": "security@ubuntu.com",
          "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
        },
        {
          "source": "security@ubuntu.com",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/23937"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://secunia.com/advisories/23984"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://secunia.com/advisories/24111"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://secunia.com/advisories/24469"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://www.securityfocus.com/bid/22299"
        },
        {
          "source": "security@ubuntu.com",
          "url": "http://www.vupen.com/english/advisories/2007/0393"
        },
        {
          "source": "security@ubuntu.com",
          "tags": [
            "Patch"
          ],
          "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/23937"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/23984"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/24111"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/24469"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/22299"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2007/0393"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch"
          ],
          "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
        }
      ],
      "sourceIdentifier": "security@ubuntu.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "NVD-CWE-Other"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:smb4k:smb4k:0.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ADAA1F65-4E7C-4D07-84C5-E104D6B680A2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:smb4k:smb4k:0.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "117FD513-0BA4-4B76-B865-7DCD2D8C3CC0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:smb4k:smb4k:0.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CDC98527-69EE-425C-B563-320F5A731FB8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:smb4k:smb4k:0.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "28CDB015-89C9-4086-B29F-444C115C050E",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp."
          },
          {
            "lang": "es",
            "value": "M\u00faltiples condiciones de carrera en Smb4K anterior a 0.8.0 permite a usuarios locales (1) modificar archivos de su elecci\u00f3n a trav\u00e9s manipulaciones no especificas del archivo de cierre Smb4K\u0027s, el cual no se maneja adecuadamente por la funci\u00f3n remove_lock_file en core/smb4kfileio.cpp, y (2) a\u00f1adir lineas en el archivo sudoers a trav\u00e9s de un ataque de enlaces simb\u00f3licos sobre archivos temporales, lo cual no es manejado de forma adecuada por la funci\u00f3n writeFile en core/smb4kfileio.cpp."
          }
        ],
        "id": "CVE-2007-0472",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "LOW",
              "cvssData": {
                "accessComplexity": "HIGH",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 3.7,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 1.9,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": true,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2007-02-03T23:28:00.000",
        "references": [
          {
            "source": "security@ubuntu.com",
            "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
          },
          {
            "source": "security@ubuntu.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/23937"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://secunia.com/advisories/23984"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://secunia.com/advisories/24111"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://secunia.com/advisories/24469"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://www.securityfocus.com/bid/22299"
          },
          {
            "source": "security@ubuntu.com",
            "url": "http://www.vupen.com/english/advisories/2007/0393"
          },
          {
            "source": "security@ubuntu.com",
            "tags": [
              "Patch"
            ],
            "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/23937"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/23984"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/24111"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/24469"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/22299"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2007/0393"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
          }
        ],
        "sourceIdentifier": "security@ubuntu.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-05-10T01:27:45Z",
      "cve": "CVE-2007-0472",
      "id": "CVE-2007-0472",
      "initial_release_date": "2023-02-15T06:13:13Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2007-0472",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2007-0472.json",
      "version": "4"
    }
  }
}

BDU:2015-09552 (CVE-2007-0472)

Vulnerability from fstec – Published: 2015-04-28 – Updated: 2021-03-23 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Gentoo Linux, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета smb4k (до версии 0.6.10a) операционной системы Gentoo Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена локально

Severity

4.4 (Medium) CVSS 2.0


                      
                        AV:L/AC:M/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

Aliases

CVE-2007-0472, CVE-2007-0473, CVE-2007-0474, CVE-2007-0475, GLSA-200703-09

References

1 reference

URL
http://security.gentoo.org/glsa/glsa-200703-09.xml

Impacted products

1 product from 1 vendor

Vendors

Gentoo Foundation Inc.

Products

Gentoo Linux

Versions

до 2007.0 (Gentoo Linux)

Product types

Operating system

Mitigations

Обновление пакета smb4k до версии 0.6.10a или выше

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Gentoo Foundation Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 2007.0 (Gentoo Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u0430 smb4k \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.6.10a \u0438\u043b\u0438 \u0432\u044b\u0448\u0435",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "09.03.2007",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-09552",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2007-0472, CVE-2007-0473, CVE-2007-0474, CVE-2007-0475, GLSA-200703-09",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Gentoo Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gentoo Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 smb4k (\u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.6.10a) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gentoo Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://security.gentoo.org/glsa/glsa-200703-09.xml",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,4)"
}

FKIE_CVE-2007-0472

Vulnerability from fkie_nvd - Published: 2007-02-03 23:28 - Updated: 2026-06-16 22:35

Severity

Summary

References

URL	Tags
security@ubuntu.com	http://developer.berlios.de/bugs/?func=detailbug&bug_id=9630&group_id=769
security@ubuntu.com	http://developer.berlios.de/project/shownotes.php?release_id=11706
security@ubuntu.com	http://developer.berlios.de/project/shownotes.php?release_id=11902
security@ubuntu.com	http://developer.berlios.de/project/shownotes.php?release_id=9777
security@ubuntu.com	http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html
security@ubuntu.com	http://secunia.com/advisories/23937	Patch, Vendor Advisory
security@ubuntu.com	http://secunia.com/advisories/23984
security@ubuntu.com	http://secunia.com/advisories/24111
security@ubuntu.com	http://secunia.com/advisories/24469
security@ubuntu.com	http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml
security@ubuntu.com	http://www.mandriva.com/security/advisories?name=MDKSA-2007:042
security@ubuntu.com	http://www.securityfocus.com/bid/22299
security@ubuntu.com	http://www.vupen.com/english/advisories/2007/0393
security@ubuntu.com	https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html	Patch
af854a3a-2127-422b-91ae-364da2661108	http://developer.berlios.de/bugs/?func=detailbug&bug_id=9630&group_id=769
af854a3a-2127-422b-91ae-364da2661108	http://developer.berlios.de/project/shownotes.php?release_id=11706
af854a3a-2127-422b-91ae-364da2661108	http://developer.berlios.de/project/shownotes.php?release_id=11902
af854a3a-2127-422b-91ae-364da2661108	http://developer.berlios.de/project/shownotes.php?release_id=9777
af854a3a-2127-422b-91ae-364da2661108	http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23937	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23984
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24111
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24469
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2007:042
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/22299
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/0393
af854a3a-2127-422b-91ae-364da2661108	https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html	Patch

Impacted products

Vendor	Product	Version
smb4k	smb4k	0.4
smb4k	smb4k	0.5
smb4k	smb4k	0.6
smb4k	smb4k	0.7

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "security@ubuntu.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:smb4k:smb4k:0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "ADAA1F65-4E7C-4D07-84C5-E104D6B680A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:smb4k:smb4k:0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "117FD513-0BA4-4B76-B865-7DCD2D8C3CC0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:smb4k:smb4k:0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDC98527-69EE-425C-B563-320F5A731FB8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:smb4k:smb4k:0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "28CDB015-89C9-4086-B29F-444C115C050E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples condiciones de carrera en Smb4K anterior a 0.8.0 permite a usuarios locales (1) modificar archivos de su elecci\u00f3n a trav\u00e9s manipulaciones no especificas del archivo de cierre Smb4K\u0027s, el cual no se maneja adecuadamente por la funci\u00f3n remove_lock_file en core/smb4kfileio.cpp, y (2) a\u00f1adir lineas en el archivo sudoers a trav\u00e9s de un ataque de enlaces simb\u00f3licos sobre archivos temporales, lo cual no es manejado de forma adecuada por la funci\u00f3n writeFile en core/smb4kfileio.cpp."
    }
  ],
  "id": "CVE-2007-0472",
  "lastModified": "2026-06-16T22:35:38.563",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 3.7,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 1.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-02-03T23:28:00.000",
  "references": [
    {
      "source": "security@ubuntu.com",
      "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
    },
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23937"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://secunia.com/advisories/23984"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://secunia.com/advisories/24111"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://secunia.com/advisories/24469"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://www.securityfocus.com/bid/22299"
    },
    {
      "source": "security@ubuntu.com",
      "url": "http://www.vupen.com/english/advisories/2007/0393"
    },
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Patch"
      ],
      "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23937"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23984"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24111"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24469"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/22299"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/0393"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
    }
  ],
  "sourceIdentifier": "security@ubuntu.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-85RQ-5M59-VJ3C

Vulnerability from github – Published: 2022-05-01 17:44 – Updated: 2022-05-01 17:44

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-0472"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-02-03T23:28:00Z",
    "severity": "LOW"
  },
  "details": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp.",
  "id": "GHSA-85rq-5m59-vj3c",
  "modified": "2022-05-01T17:44:35Z",
  "published": "2022-05-01T17:44:35Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0472"
    },
    {
      "type": "WEB",
      "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
    },
    {
      "type": "WEB",
      "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
    },
    {
      "type": "WEB",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
    },
    {
      "type": "WEB",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
    },
    {
      "type": "WEB",
      "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
    },
    {
      "type": "WEB",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23937"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23984"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24111"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24469"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/22299"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/0393"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2007-0472

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2007-0472

Aliases

CVE-2007-0472

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2007-0472",
    "description": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp.",
    "id": "GSD-2007-0472",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-0472.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-0472"
      ],
      "details": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp.",
      "id": "GSD-2007-0472",
      "modified": "2023-12-13T01:21:35.486934Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@ubuntu.com",
        "ID": "CVE-2007-0472",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "23984",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23984"
          },
          {
            "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
            "refsource": "MLIST",
            "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
          },
          {
            "name": "SUSE-SR:2007:002",
            "refsource": "SUSE",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
          },
          {
            "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
            "refsource": "CONFIRM",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
          },
          {
            "name": "22299",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/22299"
          },
          {
            "name": "24111",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24111"
          },
          {
            "name": "24469",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24469"
          },
          {
            "name": "ADV-2007-0393",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/0393"
          },
          {
            "name": "GLSA-200703-09",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
          },
          {
            "name": "23937",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23937"
          },
          {
            "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
            "refsource": "CONFIRM",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
          },
          {
            "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
            "refsource": "CONFIRM",
            "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
          },
          {
            "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769",
            "refsource": "CONFIRM",
            "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
          },
          {
            "name": "MDKSA-2007:042",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:smb4k:smb4k:0.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:smb4k:smb4k:0.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:smb4k:smb4k:0.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:smb4k:smb4k:0.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@ubuntu.com",
          "ID": "CVE-2007-0472"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
              "refsource": "MLIST",
              "tags": [
                "Patch"
              ],
              "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
            },
            {
              "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
            },
            {
              "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
            },
            {
              "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
            },
            {
              "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
            },
            {
              "name": "23937",
              "refsource": "SECUNIA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/23937"
            },
            {
              "name": "GLSA-200703-09",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
            },
            {
              "name": "SUSE-SR:2007:002",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
            },
            {
              "name": "22299",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/22299"
            },
            {
              "name": "23984",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23984"
            },
            {
              "name": "24111",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24111"
            },
            {
              "name": "24469",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24469"
            },
            {
              "name": "MDKSA-2007:042",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
            },
            {
              "name": "ADV-2007-0393",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/0393"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 3.7,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 1.9,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "severity": "LOW",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2011-03-08T02:49Z",
      "publishedDate": "2007-02-03T23:28Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2007-0472 (GCVE-0-2007-0472)

BDU:2015-09552 (CVE-2007-0472)

FKIE_CVE-2007-0472

GHSA-85RQ-5M59-VJ3C

GSD-2007-0472

Tags

Sightings

Nomenclature

Related by attack behaviour