CVE-2007-1589: Low severity Linux Linux kernel vulnerability

Published Mar 21, 2007

Updated

TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service (filesystem unavailability) by dismounting a volume mounted by a different user.

Affected Software

5 affected components

Linux Linux kernel

Truecrypt Foundation Truecrypt=4.0

Truecrypt Foundation Truecrypt=4.1

Truecrypt Foundation Truecrypt=4.2

Truecrypt Foundation Truecrypt=4.2a

Remediation

Patch Available

http://www.truecrypt.org/docs/?s=version-history

Event History

Mar 21, 2007

CVE Published

11:19 PM

Data Sourced

11:19 PM

DescriptionWeaknessAffected Software

Mar 22, 2007

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1589?

CVE-2007-1589 is assessed as a moderate severity vulnerability because it allows local users to disrupt filesystem access.

How do I fix CVE-2007-1589?

To mitigate CVE-2007-1589, upgrade TrueCrypt to version 4.3 or a later version that addresses this issue.

Who is affected by CVE-2007-1589?

CVE-2007-1589 affects local users on systems running TrueCrypt versions 4.0, 4.1, 4.2, or 4.2a that utilize set-euid mode.

What kind of impact does CVE-2007-1589 have?

CVE-2007-1589 can lead to denial of service, resulting in filesystem unavailability for volumes mounted by other users.

Is CVE-2007-1589 a remote or local vulnerability?

CVE-2007-1589 is a local vulnerability, as it requires access to the machine where TrueCrypt is running.