cve/2007/CVE-2007-5191.md
2024-05-26 14:27:05 +02:00

20 lines
801 B
Markdown

### [CVE-2007-5191](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5191)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/Shubhamthakur1997/CICD-Demo
- https://github.com/dcambronero/CloudGuard-ShiftLeft-CICD-AWS
- https://github.com/jaydenaung/CloudGuard-ShiftLeft-CICD-AWS