CVE-2007-5191
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
- CWE
- CWE-252
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- debian:debian_linux
- fedoraproject:fedora
- kernel:util-linux
- loop-aes-utils_project:loop-aes-utils
References
- http://bugs.gentoo.org/show_bug.cgi?id=195390
- http://frontal2.mandriva.com/en/security/advisories?name=MDKSA-2007:198
- http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=ebbeb2c7ac1b00b6083905957837a271e80b187e
- http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html
- http://lists.vmware.com/pipermail/security-announce/2008/000002.html