CVE-2007-0474 - Vulnerability Details - OpenCVE

Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a "design issue with smb4k_kill."

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Smb4k	Smb4k

Configuration 1 [-]

OR	cpe:2.3:a:smb4k:smb4k:0.4:::::::*
	cpe:2.3:a:smb4k:smb4k:0.5:::::::*
	cpe:2.3:a:smb4k:smb4k:0.6:::::::*
	cpe:2.3:a:smb4k:smb4k:0.7:::::::*

No data.

References

Link	Providers
http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769
http://developer.berlios.de/project/shownotes.php?release_id=11706
http://developer.berlios.de/project/shownotes.php?release_id=11902
http://developer.berlios.de/project/shownotes.php?release_id=9777
http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html
http://secunia.com/advisories/23937
http://secunia.com/advisories/23984
http://secunia.com/advisories/24111
http://secunia.com/advisories/24469
http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:042
http://www.securityfocus.com/bid/22299
http://www.vupen.com/english/advisories/2007/0393
https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: canonical

Published: 2007-02-03T23:00:00

Updated: 2024-08-07T12:19:30.500Z

Reserved: 2007-01-24T00:00:00

Link: CVE-2007-0474

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-02-03T23:28:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-0474

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-12-05T00:00:00", "descriptions": [{"lang": "en", "value": "Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a \"design issue with smb4k_kill.\""}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2007-02-09T10:00:00", "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical"}, "references": [{"name": "23984", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/23984"}, {"name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"}, {"name": "SUSE-SR:2007:002", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"}, {"name": "22299", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/22299"}, {"name": "24111", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24111"}, {"name": "24469", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24469"}, {"name": "ADV-2007-0393", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0393"}, {"name": "GLSA-200703-09", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"}, {"name": "23937", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/23937"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"}, {"name": "MDKSA-2007:042", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@ubuntu.com", "ID": "CVE-2007-0474", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a \"design issue with smb4k_kill.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "23984", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23984"}, {"name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released", "refsource": "MLIST", "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"}, {"name": "SUSE-SR:2007:002", "refsource": "SUSE", "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"}, {"name": "http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769", "refsource": "CONFIRM", "url": "http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769"}, {"name": "http://developer.berlios.de/project/shownotes.php?release_id=9777", "refsource": "CONFIRM", "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"}, {"name": "22299", "refsource": "BID", "url": "http://www.securityfocus.com/bid/22299"}, {"name": "24111", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24111"}, {"name": "24469", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24469"}, {"name": "ADV-2007-0393", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0393"}, {"name": "GLSA-200703-09", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"}, {"name": "23937", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23937"}, {"name": "http://developer.berlios.de/project/shownotes.php?release_id=11902", "refsource": "CONFIRM", "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"}, {"name": "http://developer.berlios.de/project/shownotes.php?release_id=11706", "refsource": "CONFIRM", "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"}, {"name": "MDKSA-2007:042", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T12:19:30.500Z"}, "title": "CVE Program Container", "references": [{"name": "23984", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/23984"}, {"name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"}, {"name": "SUSE-SR:2007:002", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"}, {"name": "22299", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/22299"}, {"name": "24111", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24111"}, {"name": "24469", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24469"}, {"name": "ADV-2007-0393", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0393"}, {"name": "GLSA-200703-09", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"}, {"name": "23937", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/23937"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"}, {"name": "MDKSA-2007:042", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"}]}]}, "cveMetadata": {"assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "assignerShortName": "canonical", "cveId": "CVE-2007-0474", "datePublished": "2007-02-03T23:00:00", "dateReserved": "2007-01-24T00:00:00", "dateUpdated": "2024-08-07T12:19:30.500Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:smb4k:smb4k:0.4:*:*:*:*:*:*:*", "matchCriteriaId": "ADAA1F65-4E7C-4D07-84C5-E104D6B680A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:smb4k:smb4k:0.5:*:*:*:*:*:*:*", "matchCriteriaId": "117FD513-0BA4-4B76-B865-7DCD2D8C3CC0", "vulnerable": true}, {"criteria": "cpe:2.3:a:smb4k:smb4k:0.6:*:*:*:*:*:*:*", "matchCriteriaId": "CDC98527-69EE-425C-B563-320F5A731FB8", "vulnerable": true}, {"criteria": "cpe:2.3:a:smb4k:smb4k:0.7:*:*:*:*:*:*:*", "matchCriteriaId": "28CDB015-89C9-4086-B29F-444C115C050E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a \"design issue with smb4k_kill.\""}, {"lang": "es", "value": "Smb4K anterior 0.8.0 permite a usuarios locales, cuando se presenta sobre la lista Smb4K sudoers, matando procesos de su elecci\u00f3n, relacionado con \"el asunto: dise\u00f1o con smb4k_kill\""}], "id": "CVE-2007-0474", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 3.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-02-03T23:28:00.000", "references": [{"source": "security@ubuntu.com", "url": "http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769"}, {"source": "security@ubuntu.com", "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"}, {"source": "security@ubuntu.com", "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"}, {"source": "security@ubuntu.com", "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"}, {"source": "security@ubuntu.com", "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"}, {"source": "security@ubuntu.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/23937"}, {"source": "security@ubuntu.com", "url": "http://secunia.com/advisories/23984"}, {"source": "security@ubuntu.com", "url": "http://secunia.com/advisories/24111"}, {"source": "security@ubuntu.com", "url": "http://secunia.com/advisories/24469"}, {"source": "security@ubuntu.com", "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"}, {"source": "security@ubuntu.com", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"}, {"source": "security@ubuntu.com", "url": "http://www.securityfocus.com/bid/22299"}, {"source": "security@ubuntu.com", "url": "http://www.vupen.com/english/advisories/2007/0393"}, {"source": "security@ubuntu.com", "tags": ["Patch"], "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/23937"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/23984"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/24111"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/24469"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/22299"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/0393"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"}], "sourceIdentifier": "security@ubuntu.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}