CVE-2007-1507: High severity OpenAFS OpenAFS vulnerability

Published Mar 20, 2007

Updated

The default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid programs within the local cell, which might allow attackers to gain privileges by spoofing a response to an AFS cache manager FetchStatus request, and setting setuid and root ownership for files in the cache.

Affected Software

21 affected components

OpenAFS OpenAFS=1.4.4

OpenAFS OpenAFS=1.4.3

OpenAFS OpenAFS=1.4.0

OpenAFS OpenAFS=1.5.6

OpenAFS OpenAFS=1.4.2

OpenAFS OpenAFS=1.5.13

OpenAFS OpenAFS=1.5.3

OpenAFS OpenAFS=1.5.5

OpenAFS OpenAFS=1.5.12

OpenAFS OpenAFS=1.5.1

OpenAFS OpenAFS=1.5.15

OpenAFS OpenAFS=1.5.8

OpenAFS OpenAFS=1.5.16

OpenAFS OpenAFS=1.5.14

OpenAFS OpenAFS=1.5.9

OpenAFS OpenAFS=1.5.10

OpenAFS OpenAFS=1.5.0

OpenAFS OpenAFS=1.5.2

OpenAFS OpenAFS=1.4.1

OpenAFS OpenAFS=1.5.11

OpenAFS OpenAFS=1.5.7

Remediation

Patch Available

http://www.openafs.org/pipermail/openafs-announce/2007/000186.html

Event History

Mar 20, 2007

CVE Published

10:19 AM

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1507?

CVE-2007-1507 is considered a high severity vulnerability due to its ability to allow attackers to gain elevated privileges.

How do I fix CVE-2007-1507?

To mitigate CVE-2007-1507, upgrade OpenAFS to version 1.4.4 or 1.5.17 or later.

Which versions of OpenAFS are affected by CVE-2007-1507?

CVE-2007-1507 affects OpenAFS versions 1.4.0 through 1.4.3 and 1.5.0 through 1.5.16.

Can CVE-2007-1507 be exploited remotely?

Yes, CVE-2007-1507 can potentially be exploited remotely if an attacker can spoof AFS cache manager FetchStatus requests.

What type of security impact does CVE-2007-1507 have?

CVE-2007-1507 can enable unauthorized privilege escalation, allowing attackers to gain control over setuid programs.