CVE-2007-2654
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows...
CVE-2007-2654 is a medium vulnerability (CVSS 4.4) in Xfsdump, published May 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. Fixed in xfsdump 2.2.45-1.
- Severity
- 4.4 MediumCVSS 2.0, NVD
- Exploit chance
- 0.33%EPSS, 26th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.2.45-1xfsdump +2 more
Description
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
- Record
CVE-2007-2654- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE ListNo score
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
- Record
CVE-2007-2654- Updated
- 2026-11-02
EUVDEUVD-2007-2646No score
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
- Record
EUVD-2007-2646- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9gpj-6mg9-3q6qNo score
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows...
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
- Record
GHSA-9gpj-6mg9-3q6q- Weakness
- CWE-362
- Updated
- 2026-11-02
OSVNo score
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
- Record
CVE-2007-2654- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2654No score
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
- Record
DEBIAN-CVE-2007-2654- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/25761
securityfocus.com/bid/23922
osvdb.org/36716
ubuntu.com/usn/usn-516-1
Show 7 moreShow less
novell.com/linux/security/advisories/2007_10_sr.html
bugs.debian.org/cgi-bin/bugreport.cgi?bug=417894
mandriva.com/security/advisories?name=MDKSA-2007:134
nvd.nist.gov/vuln/detail/CVE-2007-2654
github.com/advisories/GHSA-9gpj-6mg9-3q6q
security-tracker.debian.org/tracker/CVE-2007-2654