PT-2007-5151 · Samsung · Samsung Scx-4200 Driver

Hdiamantle + 1 · Publicado 2007-07-21 · Atualizado 2008-11-15 · CVE-2007-3931

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Samsung SCX-4200 Driver version 2.00.95

Description: The issue allows local users to gain privileges due to the wrap setuid third party application function in the installation script adding setuid permissions to third-party applications such as xsane and xscanimage.

Recommendations: For Samsung SCX-4200 Driver version 2.00.95, consider removing setuid permissions from third-party applications to prevent privilege escalation until a proper fix is available. As a temporary workaround, restrict access to the wrap setuid third party application function to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-3931

Produtos afetados

Samsung Scx-4200 Driver

Referências · 6

• http://osvdb.org/38214 · Nota
• http://linuxfr.org/forums/15/22562.html · Nota
• http://securityfocus.com/bid/24953 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-3931 · Nota de Segurança
• http://it.slashdot.org/it/07/07/18/0319203.shtml · Nota
• http://secunia.com/advisories/26092 · Aviso do Fabricante