CVE-2007-6211
Send ICMP Nasty Garbage (SING) - Append File Logrotate
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
3Exploited in Wild
-Decision
Descriptions
Send ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to override a non-setuid default during installation.
Send ICMP Nasty Garbage (sing) en Debian GNU/Linux, permite a usuarios locales agregar archivos arbitrarios y alcanzar privilegios por medio de la opción -L (archivo de registro de salida). NOTA: este problema es solo una vulnerabilidad en entornos limitados, ya que en sing no está instalado setuid, y el administrador necesitaría invalidar un valor predeterminado que no sea setuid durante la instalación.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2007-12-03 CVE Reserved
- 2007-12-04 CVE Published
- 2007-12-06 First Exploit
- 2023-03-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (7)
URL | Tag | Source |
---|---|---|
http://osvdb.org/44157 | Vdb Entry | |
http://www.securityfocus.com/archive/1/484472/100/0/threaded | Mailing List | |
http://www.securityfocus.com/archive/1/484591/100/200/threaded | Mailing List | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/38822 | Vdb Entry |
URL | Date | SRC |
---|---|---|
https://www.exploit-db.com/exploits/4698 | 2007-12-06 | |
http://securityreason.com/securityalert/3412 | 2024-08-07 | |
http://www.securityfocus.com/bid/26679 | 2024-08-07 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Sing Search vendor "Sing" | Sing Search vendor "Sing" for product "Sing" | 1.1 Search vendor "Sing" for product "Sing" and version "1.1" | - |
Affected
| in | Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | * | - |
Safe
|