CVE-2007-3740 : Detail

CVE-2007-3740

A01-Broken Access Control
0.12%V4
Local
2007-09-13
23h00 +00:00
2017-09-28
10h57 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-264 Category : Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Metrics

An error occured. Please try again later.
Metrics Score Severity CVSS Vector Source
V2 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P nvd@nist.gov