CVE-2007-5101

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-09-26 · updated 2026-06-16
Weakness: CWE-264

Description

ChironFS before 1.0 RC7 sets user/group ownership to the mounter account instead of the creator account when files are created, which allows local users to gain privileges.

Affected products

Furquim Chironfs: through 1.0_rc6

References

http://code.google.com/p/chironfs/issues/detail?id=6
http://furquim.org/chironfs/Changelog.html
http://osvdb.org/40586
http://secunia.com/advisories/26943
http://www.securityfocus.com/bid/25780
https://exchange.xforce.ibmcloud.com/vulnerabilities/36751
http://code.google.com/p/chironfs/issues/detail?id=6
http://furquim.org/chironfs/Changelog.html
http://osvdb.org/40586
http://secunia.com/advisories/26943
http://www.securityfocus.com/bid/25780
https://exchange.xforce.ibmcloud.com/vulnerabilities/36751

Get alerted when CVE-2007-5101 or the next vulnerability affects your stack