CVE-2007-1589
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
TrueCrypt是一款开源的虚拟加密盘加密软件，不需要生成任何文件即可在硬盘上建立虚拟磁盘。 TrueCrypt在处理文件系统的卸载时存在漏洞，本地攻击者可能利用此漏洞对系统执行拒绝服务攻击。 在以Set-EUID模式运行的Linux系统上，如果本地TrueCrypt用户能够卸载其他用户所加载的卷标的话，就会导致文件系统不可用。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2007-1589
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service (filesystem unavailability) by dismounting a volume mounted by a different user.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
TrueCrypt卸载Set-EUID本地拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TrueCrypt是一款开源的虚拟加密盘加密软件，不需要生成任何文件即可在硬盘上建立虚拟磁盘。 TrueCrypt在处理文件系统的卸载时存在漏洞，本地攻击者可能利用此漏洞对系统执行拒绝服务攻击。 在以Set-EUID模式运行的Linux系统上，如果本地TrueCrypt用户能够卸载其他用户所加载的卷标的话，就会导致文件系统不可用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2007-1589
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-1589
请登录查看更多情报信息。
Vendor Advisories for CVE-2007-1589 (3)
Other References for CVE-2007-1589 (1)
-
http://www.truecrypt.org/docs/?s=version-history x_refsource_CONFIRM
Same Patch Batch · n/a · 2007-03-21 · 44 CVEs total
| CVE-2007-1578 | Atrium Mercur IMapD NTLM 栈缓冲区溢出漏洞 | |
| CVE-2007-1581 | PHP资源系统任意代码执行漏洞 | |
| CVE-2007-1580 | FTPDMIN Windows 驱动器号列表指令 远程拒绝服务漏洞 | |
| CVE-2007-1582 | PHP GD扩展访问已释放资源漏洞 | |
| CVE-2007-1585 | Linksys WAG200G DSL路由器/网关远程信息泄露漏洞 | |
| CVE-2007-1586 | Zyxel Router Zynos SMB 数据处理 拒绝服务漏洞 | |
| CVE-2007-1587 | Tim Soderstrom StatsDawg mail.tpl 任意程序运行漏洞 | |
| CVE-2007-1588 | MyServe server.cpp 权限许可和访问控制漏洞 | |
| CVE-2007-1590 | Grandstream BudgeTone 200 IP电话 拒绝服务攻击漏洞 | |
| CVE-2007-1584 | PHP 标头函数 缓冲区溢出漏洞 | |
| CVE-2007-1579 | Atrium Mercur IMAP SUBSCRIBE请求远程栈溢出漏洞 | |
| CVE-2007-1577 | GeBlog index.php 目录遍历漏洞 | |
| CVE-2003-1322 | Atrium Software Mercur Mailserver IMAP远程缓冲区溢出漏洞 | |
| CVE-2007-1002 | Gnome Evolution远程格式串处理漏洞 | |
| CVE-2007-0654 | XMMS皮肤文件整数溢出漏洞 | |
| CVE-2007-0653 | XMMS皮肤文件整数溢出漏洞 | |
| CVE-2007-1576 | PHProjekt 多个跨站脚本攻击漏洞 | |
| CVE-2007-1575 | PHProjekt 多个SQL注入漏洞 | |
| CVE-2007-1574 | CARE2X phpinfo.php直接请求 信息泄露漏洞 | |
| CVE-2007-1573 | Jelsoft Vbulletin admincp/attachment.php SQL注入漏洞 |
Showing top 20 of 44 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2007-1589
No comments yet