PT-2007-7466 · Util Linux+8 · Util-Linux+8

Published 1970-01-01 · Updated 2020-11-04 · CVE-2007-5191

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.12r-r8 util-linux-2.11y util-linux-2.12a util-linux-2.13 mount-2.11y-31.24 losetup-2.11y-31.24 loop-aes-utils (affected versions not specified) bsdutils (affected versions not specified) mount (affected versions not specified) mount-aes-udeb (affected versions not specified) cfdisk-udeb (affected versions not specified) util-linux-locales (affected versions not specified) fdisk-udeb (affected versions not specified)

Description The issue concerns multiple vulnerabilities in various packages of Debian GNU/Linux and Red Hat Enterprise Linux operating systems. These vulnerabilities can lead to a breach of confidentiality, integrity, and availability of protected information. Exploitation can be carried out locally by an attacker. Technical details include the incorrect order of calling setuid and setgid functions in mount and umount, as well as the lack of return value checks, potentially allowing attackers to gain privileges via helpers like mount.nfs.

Recommendations For util-linux versions prior to 2.12r-r8, update to version 2.12r-r8 or later. For util-linux-2.11y, util-linux-2.12a, and util-linux-2.13, update to a version later than 2.13. For mount-2.11y-31.24 and losetup-2.11y-31.24, update to versions later than 2.11y-31.24. For loop-aes-utils, bsdutils, mount, mount-aes-udeb, cfdisk-udeb, util-linux-locales, and fdisk-udeb, update to the latest available versions. As a temporary workaround, consider restricting access to the mount and umount functions until a patch is available. Restrict the use of the setuid and setgid functions to minimize the risk of exploitation.

Fix

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

BDU:2015-01283

BDU:2015-01284

BDU:2015-02958

BDU:2015-02959

BDU:2015-02960

BDU:2015-02961

BDU:2015-02962

BDU:2015-02963

BDU:2015-06831

BDU:2015-06832

BDU:2015-06959

BDU:2015-06960

BDU:2015-06961

BDU:2015-09606

CVE-2007-5191

DSA-1449-1

DSA-1450-1

DTSA-64-1

DTSA-70-1

RHSA-2007:0969

RHSA-2007_0969

Affected Products

Debian

Red Hat

Bsdutils

Fdisk-Udeb

Loop-Aes-Utils

Mount

Mount-Aes-Udeb

Util-Linux

Util-Linux-Locales

References · 58

• http://security.gentoo.org/glsa/glsa-200710-18.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0969.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01283 · Security Note
• https://bdu.fstec.ru/vul/2015-01284 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html · Vendor Advisory
• http://debian.org/security/2008/dsa-1449 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02961 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5191 · Security Note
• https://redhat.com/archives/fedora-package-announce/2007-October/msg00144.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02963 · Security Note
• http://debian.org/security/2008/dsa-1450 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5191 · Security Note
• http://ubuntu.com/usn/usn-533-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02960 · Security Note
• https://bdu.fstec.ru/vul/2015-06961 · Security Note