Vulnerability in Smb4k
CVE-2007-0473
The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information (/etc/sudoers contents) by reading this file.
EPSS: 0.004 (28.3th percentile) — read the EPSS interpretation.
Affected products
- Smb4k — versions 0.4, 0.5, 0.6
- N/a — versions n/a
References
- security@ubuntu.com (x_refsource_SECUNIA, third-party-advisory)
- security@ubuntu.com (mailing-list, x_refsource_MLIST, Patch)
- security@ubuntu.com (vendor-advisory, x_refsource_SUSE)
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (vdb-entry, x_refsource_BID)
- security@ubuntu.com (x_refsource_SECUNIA, third-party-advisory)
- security@ubuntu.com (x_refsource_SECUNIA, third-party-advisory)
- security@ubuntu.com (vdb-entry, x_refsource_VUPEN)
- security@ubuntu.com (vendor-advisory, x_refsource_GENTOO)
- security@ubuntu.com (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)