Description
Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | mkisofs +3 | 8:2.01.0.a32-0.EL3.6 | RHSA-2007:0465 |
| RHEL 3 | pam +1 | 0.75-72 | RHSA-2007:0465 |
Advisories 1
- RHSA-2007:0465 Red Hat Security Advisory: pam security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player mailing-list
- GLSA-200711-23 vendor-advisory
- 25894 third-party-advisory
- ADV-2007-3229 vdb-entry
- RHSA-2007:0465 vendor-advisory
- http://lkml.org/lkml/2004/7/30/147
- oval:org.mitre.oval:def:10011 vdb-entry signature
- 25749 vdb-entry
- 26909 third-party-advisory
- 27706 third-party-advisory
- linux-sgio-gain-privileges(17505) vdb-entry
- 25631 third-party-advisory