NVD脆弱性詳細

Exploit、PoC検索

Exploit DB

NVD脆弱性検索トップ

->

NVD脆弱性詳細

CVE-2007-4308

概要	The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.
公表日	2007年8月14日6:17
登録日	2021年1月29日14:18
最終更新日	2018年10月16日6:34

CVSS2.0 : LOW
スコア	1.9
ベクター	AV:L/AC:M/Au:N/C:N/I:N/A:P
攻撃元区分(AV)	ローカル
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	低
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1		以上	以下	より上	未満
cpe:2.3:a:adaptec:aacraid_controller::::::::

関連情報、対策とツール

No	URL	refsource	タグ
1	http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2	CONFIRM
2	http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html	SUSE
3	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html	SUSE
4	http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html	SUSE
5	http://lists.vmware.com/pipermail/security-announce/2008/000005.html	MLIST
6	http://lkml.org/lkml/2007/7/23/195	CONFIRM
7	http://secunia.com/advisories/26322	SECUNIA	Vendor Advisory
8	http://secunia.com/advisories/26643	SECUNIA
9	http://secunia.com/advisories/26647	SECUNIA
10	http://secunia.com/advisories/26651	SECUNIA
11	http://secunia.com/advisories/27212	SECUNIA
12	http://secunia.com/advisories/27322	SECUNIA
13	http://secunia.com/advisories/27436	SECUNIA
14	http://secunia.com/advisories/27747	SECUNIA
15	http://secunia.com/advisories/27912	SECUNIA
16	http://secunia.com/advisories/27913	SECUNIA
17	http://secunia.com/advisories/28806	SECUNIA
18	http://secunia.com/advisories/29032	SECUNIA
19	http://secunia.com/advisories/29058	SECUNIA
20	http://secunia.com/advisories/29570	SECUNIA
21	http://secunia.com/advisories/33280	SECUNIA
22	http://securitytracker.com/id?1019470	SECTRACK
23	http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm	CONFIRM
24	http://www.debian.org/security/2007/dsa-1363	DEBIAN
25	http://www.debian.org/security/2008/dsa-1503	DEBIAN
26	http://www.debian.org/security/2008/dsa-1504	DEBIAN
27	http://www.mandriva.com/security/advisories?name=MDKSA-2007:195	MANDRIVA
28	http://www.mandriva.com/security/advisories?name=MDKSA-2007:196	MANDRIVA
29	http://www.redhat.com/support/errata/RHSA-2007-0939.html	REDHAT
30	http://www.redhat.com/support/errata/RHSA-2007-0940.html	REDHAT
31	http://www.redhat.com/support/errata/RHSA-2007-1049.html	REDHAT
32	http://www.redhat.com/support/errata/RHSA-2008-0787.html	REDHAT
33	http://www.securityfocus.com/archive/1/488457/100/0/threaded	BUGTRAQ
34	http://www.securityfocus.com/bid/25216	BID
35	http://www.ubuntu.com/usn/usn-508-1	UBUNTU
36	http://www.ubuntu.com/usn/usn-509-1	UBUNTU
37	http://www.ubuntu.com/usn/usn-510-1	UBUNTU
38	http://www.vupen.com/english/advisories/2007/2786	VUPEN
39	http://www.vupen.com/english/advisories/2008/0637	VUPEN
40	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8872	OVAL

共通脆弱性一覧