CVE-2007-3740
Publication date 14 September 2007
Last updated 24 July 2024
Ubuntu priority
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.
From the Ubuntu Security Team
It was discovered that certain CIFS filesystem actions did not honor the umask of a process. Local attackers could exploit this to gain additional privileges.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| linux-source-2.6.15 | ||
| linux-source-2.6.17 | ||
| linux-source-2.6.20 |