Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2007-4849

Date: September 12, 2007

JFFS2, as used on One Laptop Per Child (OLPC) build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during (1) inode creation or (2) ACL setting, which might allow local users to access restricted files or directories after a remount of a filesystem, related to "legacy modes" and an inconsistency between dentry permissions and inode permissions.

Severity Score

Related Resources (13)

https://people.canonical.com/~ubuntu-security/cve/CVE-2007-4849
http://secunia.com/advisories/26978
http://dev.laptop.org/ticket/2732
http://secunia.com/advisories/28170
http://www.ubuntu.com/usn/usn-574-1
http://secunia.com/advisories/28706
https://nvd.nist.gov/vuln/detail/CVE-2007-4849
http://git.infradead.org/?p=mtd-2.6.git%3Ba=commitdiff%3Bh=9ed437c50d89eabae763dd422579f73fdebf288d
http://www.debian.org/security/2007/dsa-1378
http://lists.infradead.org/pipermail/linux-mtd-cvs/2007-August/005897.html
http://www.securityfocus.com/bid/25838
http://www.ubuntu.com/usn/usn-558-1
https://www.mend.io/vulnerability-database/CVE-2007-4849

Severity Score

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us