CVE-2007-6211

Send ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to override a non-setuid default during installation.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2007-12-04

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Sing (Sing)

References

• http://osvdb.org/44157
• http://securityreason.com/securityalert/3412
• http://www.securityfocus.com/archive/1/484472/100/0/threaded
• http://www.securityfocus.com/archive/1/484591/100/200/threaded
• http://www.securityfocus.com/bid/26679
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38822