Bug 214188 (CVE-2007-3740)

Summary:	CIFS filesystem, when Unix extension support is enabled, does not honor the umask of a process (CVE-2007-3740)
Product:	Gentoo Security	Reporter:	unnamedrambler
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	chainsaw, kernel
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.debian.org/security/2007/dsa-1378
Whiteboard:	[linux < 2.6.22][genpatches < 2.6.22-1]
Package list:		Runtime testing required:	---

Description unnamedrambler 2008-03-21 23:30:16 UTC

+++ This bug was initially created as a clone of Bug #194075 +++

CVE-2007-3740:
  The CIFS filesystem, when Unix extension support is enabled, does not
  honor the umask of a process, which allows local users to gain privileges.