CVE-2007-5827
iSCSI Enterprise Target (iscsitarget) 0.4.15 uses weak permissions for /etc/ietd.conf, which...
CVE-2007-5827 is a low vulnerability (CVSS 2.1) in Iscsitarget, published November 5, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. Fixed in iscsitarget 0.4.15-4+lenny1.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.33%EPSS, 26th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.4.15-4+lenny1iscsitarget
Description
iSCSI Enterprise Target (iscsitarget) 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iscsitargetDebian:5.0 | before 0.4.15-4+lenny1 | 0.4.15-4+lenny1 |
What each source reports
NVD Score used
iSCSI Enterprise Target (iscsitarget) 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords.
- Record
CVE-2007-5827- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
iSCSI Enterprise Target (iscsitarget) 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords.
- Record
CVE-2007-5827- Updated
- 2026-11-02
EUVDEUVD-2007-5797No score
iSCSI Enterprise Target (iscsitarget) 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords.
- Record
EUVD-2007-5797- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pqhh-3p5w-253mNo score
iSCSI Enterprise Target (iscsitarget) 0.4.15 uses weak permissions for /etc/ietd.conf, which...
iSCSI Enterprise Target (iscsitarget) 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords.
- Record
GHSA-pqhh-3p5w-253m- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.