CVE-2007-5191

mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.

🔗 References (68)

• secalert@redhathttp://bugs.gentoo.org/show_bug.cgi?id=195390
• secalert@redhathttp://frontal2.mandriva.com/en/security/advisories?name=MDKSA-2007:198
• secalert@redhathttp://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=ebbeb2c7ac1b00b6083905957837a271e80b187e
• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html
• secalert@redhathttp://lists.vmware.com/pipermail/security-announce/2008/000002.html
• secalert@redhathttp://secunia.com/advisories/27104
• secalert@redhathttp://secunia.com/advisories/27122
• secalert@redhathttp://secunia.com/advisories/27145
• secalert@redhathttp://secunia.com/advisories/27188
• secalert@redhathttp://secunia.com/advisories/27283
• secalert@redhathttp://secunia.com/advisories/27354
• secalert@redhathttp://secunia.com/advisories/27399
• secalert@redhathttp://secunia.com/advisories/27687
• secalert@redhathttp://secunia.com/advisories/28348
• secalert@redhathttp://secunia.com/advisories/28349