PT-2007-5151 · Samsung · Samsung Scx-4200 Driver

Hdiamantle + 1 · Published 2007-07-21 · Updated 2008-11-15 · CVE-2007-3931

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Samsung SCX-4200 Driver version 2.00.95

Description: The issue allows local users to gain privileges due to the wrap setuid third party application function in the installation script adding setuid permissions to third-party applications such as xsane and xscanimage.

Recommendations: For Samsung SCX-4200 Driver version 2.00.95, consider removing setuid permissions from third-party applications to prevent privilege escalation until a proper fix is available. As a temporary workaround, restrict access to the wrap setuid third party application function to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-3931

Affected Products

Samsung Scx-4200 Driver

References · 6

• http://securityfocus.com/bid/24953 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3931 · Security Note
• http://secunia.com/advisories/26092 · Vendor Advisory
• http://osvdb.org/38214 · Note
• http://linuxfr.org/forums/15/22562.html · Note
• http://it.slashdot.org/it/07/07/18/0319203.shtml · Note