Vulnerability Details CVE-2007-5101
ChironFS before 1.0 RC7 sets user/group ownership to the mounter account instead of the creator account when files are created, which allows local users to gain privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 15.7%
CVSS Severity
CVSS v2 Score 7.2
References
- http://code.google.com/p/chironfs/issues/detail?id=6
- http://furquim.org/chironfs/Changelog.html
- http://osvdb.org/40586
- http://secunia.com/advisories/26943
- http://www.securityfocus.com/bid/25780
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36751
- http://code.google.com/p/chironfs/issues/detail?id=6
- http://furquim.org/chironfs/Changelog.html
- http://osvdb.org/40586
- http://secunia.com/advisories/26943
- http://www.securityfocus.com/bid/25780
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36751