Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

openafs: privilege escalation

Package(s):

openafs

CVE #(s):

CVE-2007-1507

Created:

March 21, 2007

Updated:

April 4, 2007

Description:

The handling of setuid files in the OpenAFS filesystem is flawed in such a way that a sufficiently clever attacker could make an arbitrary executable file to appear to be setuid.

Alerts:

Gentoo	200704-03	2007-04-03
Mandriva	MDKSA-2007:066	2007-03-20
Debian	DSA-1271-1	2007-03-20

(Log in to post comments)