CVE-2007-4849
- State
- Published
- Severity
- Not scored
- Published
- Sep 12, 2007
- Updated
- Aug 7, 2024
- Reserved
- Sep 12, 2007
Description
JFFS2, as used on One Laptop Per Child (OLPC) build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during (1) inode creation or (2) ACL setting, which might allow local users to access restricted files or directories after a remount of a filesystem, related to "legacy modes" and an inconsistency between dentry permissions and inode permissions.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [linux-mtd] 20070822 [JFFS2] Fix ACL vs. mode handling.mailing-list
- 26978third-party-advisory
- 28706third-party-advisory
- 25838vdb-entry
- http://git.infradead.org/?p=mtd-2.6.git%3Ba=commitdiff%3Bh=9ed437c50d89eabae763dd422579f73fdebf288d
- http://dev.laptop.org/ticket/2732
- USN-558-1vendor-advisory
- USN-574-1vendor-advisory
- 28170third-party-advisory
- DSA-1378vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.