CVE-2007-3852: Medium severity sysstat sysstat vulnerability
Published Aug 14, 2007
·Updated
The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary code.
Affected Software
21 affected components
sysstat sysstat=6.0.2
sysstat sysstat=7.1.5
sysstat sysstat=7.0.3
sysstat sysstat=7.1.4
sysstat sysstat=7.0.1
sysstat sysstat=6.0.1
sysstat sysstat=5.1.2
sysstat sysstat=7.0.0
sysstat sysstat=5.1.4
sysstat sysstat=6.0.5
sysstat sysstat=7.0.2
sysstat sysstat=6.0.3
sysstat sysstat=5.1.5
sysstat sysstat=6.0.0
sysstat sysstat=7.1.1
sysstat sysstat=7.0.4
sysstat sysstat=7.1.2
sysstat sysstat=6.0.4
sysstat sysstat=7.1.3
sysstat sysstat=5.1.3
sysstat sysstat=7.1.6
Event History
Aug 14, 2007
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3852?
CVE-2007-3852 is classified as high severity due to its potential for local users to execute arbitrary code.
2
How do I fix CVE-2007-3852?
To fix CVE-2007-3852, upgrade sysstat to version 7.1.7 or later, where the issue has been resolved.
3
Which versions of sysstat are affected by CVE-2007-3852?
CVE-2007-3852 affects sysstat versions 5.1.2 to 7.1.6.
4
What is the impact of an exploit using CVE-2007-3852?
Exploitation of CVE-2007-3852 can lead to arbitrary code execution, compromising system integrity.
5
Who can exploit CVE-2007-3852?
CVE-2007-3852 can be exploited by any local user who has access to the affected sysstat versions.