CVE catalog

CVE-2007-3912

debian-goodies: CVE-2007-3912

[CVE catalog]

Severity
High
Published
Source
[NVD] · [CVE record]
EPSS
0.35% · Oct 25, 2026

checkrestart in debian-goodies before 0.34 allows local users to gain privileges via shell metacharacters in the name of the executable file for a running process.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandebian-goodiessid0.88.2fixed
Debiandebian-goodiesforky0.88.2fixed
Debiandebian-goodiestrixie0.88.2fixed
Debiandebian-goodiesbookworm0.88.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandebian-goodiessourcesid0.34mediumNot reported[440411]
Debiandebian-goodiessourceforky0.34mediumNot reported[440411]
Debiandebian-goodiessourcetrixie0.34mediumNot reported[440411]
Debiandebian-goodiessourcebookworm0.34mediumNot reported[440411]

[Debian bug #440411]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Details (2)
    • 0.88.1 · all · bookworm

      Fixed · Fixed: 0.34

      dsa · debian-goodies · debian · bookworm; dsa · debian-goodies · debian · 12

    • 0.88.1 · all · bookworm

      Fixed · Fixed: 0.34

      dsa · debian-goodies · debian · bookworm; dsa · debian-goodies · debian · 12

[Debian 13 (Trixie)]

  • Details (2)
    • 0.88.2 · all · trixie

      Fixed · Fixed: 0.34

      dsa · debian-goodies · debian · 13

    • 0.88.2 · all · trixie

      Fixed · Fixed: 0.34

      dsa · debian-goodies · debian · 13

Observed:

References