Back to search
CVE-2007-0473
Published: Feb 3, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information (/etc/sudoers contents) by reading this file.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
23984
third-party-advisory
x_refsource_SECUNIA
[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released
mailing-list
x_refsource_MLIST
SUSE-SR:2007:002
vendor-advisory
x_refsource_SUSE
http://developer.berlios.de/project/shownotes.php?release_id=9777
x_refsource_CONFIRM
22299
vdb-entry
x_refsource_BID
24111
third-party-advisory
x_refsource_SECUNIA
24469
third-party-advisory
x_refsource_SECUNIA
ADV-2007-0393
vdb-entry
x_refsource_VUPEN
GLSA-200703-09
vendor-advisory
x_refsource_GENTOO
23937
third-party-advisory
x_refsource_SECUNIA
http://developer.berlios.de/project/shownotes.php?release_id=11902
x_refsource_CONFIRM
http://developer.berlios.de/project/shownotes.php?release_id=11706
x_refsource_CONFIRM
http://developer.berlios.de/bugs/?func=detailbug&bug_id=9630&group_id=769
x_refsource_CONFIRM
MDKSA-2007:042
vendor-advisory
x_refsource_MANDRIVA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now