CVE-2007-3099
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's...
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss).
Exploit likelihood
What each source reports
NVD Score used
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss).
- Record
CVE-2007-3099- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss).
- Record
CVE-2007-3099- Updated
- 2026-11-02
EUVDEUVD-2007-3091 No score
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss).
- Record
EUVD-2007-3091- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4698-4fhw-m884 No score
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's...
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss).
- Record
GHSA-4698-4fhw-m884- Updated
- 2026-11-02
OSV No score
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss).
- Record
CVE-2007-3099- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-3099 No score
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss).
- Record
DEBIAN-CVE-2007-3099- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
open-iscsiDebian:12 |
before 2.0.865-1 | 2.0.865-1 |
open-iscsiDebian:13 |
before 2.0.865-1 | 2.0.865-1 |
open-iscsiDebian:14 |
before 2.0.865-1 | 2.0.865-1 |
open-iscsiDebian:4.0 From an advisory covering 2 CVEs |
before 2.0.730-1etch1, plus listed versions 2.0.730-1 |
2.0.730-1etch1 |
iscsi-initiator-utilsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:6.2.0.742-0.6.el5 | 0:6.2.0.742-0.6.el5 |
iscsi-initiator-utils-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:6.2.0.742-0.6.el5 | 0:6.2.0.742-0.6.el5 |
iscsi-initiator-utilsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:6.2.0.742-0.6.el5 | 0:6.2.0.742-0.6.el5 |
iscsi-initiator-utils-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:6.2.0.742-0.6.el5 | 0:6.2.0.742-0.6.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3099 is a low vulnerability (CVSS 2.1) in Redhat Enterprise Linux, published June 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.76%, the 55th percentile. Fixed in open-iscsi 2.0.865-1.
References
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=243719
secunia.com/advisories/25679
securityfocus.com/bid/24471
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11595
securitytracker.com/id?1018246
osvdb.org/37269
Show 22 moreShow less
support.novell.com/techcenter/psdb/187174044e1dbe78726bcf840f7530ed.html
novell.com/linux/security/advisories/2007_17_sr.html
svn.berlios.de/viewcvs/open-iscsi?rev=857&view=rev
debian.org/security/2007/dsa-1314
exchange.xforce.ibmcloud.com/vulnerabilities/34944
redhat.com/support/errata/RHSA-2007-0497.html
nvd.nist.gov/vuln/detail/CVE-2007-3099
github.com/advisories/GHSA-4698-4fhw-m884
security-tracker.debian.org/tracker/CVE-2007-3099
access.redhat.com/errata/RHSA-2007:0497
kbase.redhat.com/faq/FAQ_105_10521.shtm
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0497.json
cve.org/CVERecord?id=CVE-2007-3099