CVE-2007-6249
CVSS V2 Low 2.1
CVSS V3 None
Description
etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often resulting in permissions weaker than those of the original files, which might allow local users to obtain sensitive information by reading the merge file.
Overview
- CVE ID
- CVE-2007-6249
- Assigner
- cve@mitre.org
- Vulnerability Status
- Modified
- Published Version
- 2007-12-15T01:46:00
- Last Modified Date
- 2017-08-08T01:29:02
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| AND | ||||
| cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:* | 0 | OR | ||
| cpe:2.3:a:gentoo:portage:*:*:*:*:*:*:*:* | 1 | OR | 2.1.3.10 |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:L/AC:L/Au:N/C:N/I:P/A:N
- Access Vector
- LOCAL
- Access Compatibility
- LOW
- Authentication
- NONE
- Confidentiality Impact
- NONE
- Integrity Impact
- PARTIAL
- Availability Impact
- NONE
- Base Score
- 2.1
- Severity
- LOW
- Exploitability Score
- 3.9
- Impact Score
- 2.9
References
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2007-6249 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6249 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2022-05-10 09:09:36 | Added to TrackCVE |