CVEvulnerability

CVE-2007-1738

6.9 MEDIUM Published 2007-03-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-03-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service (filesystem unavailability) or gain privileges by mounting a crafted TrueCrypt volume, as demonstrated using (1) /usr/bin or (2) another user's home directory, a different issue than CVE-2007-1589.

Affected configurations

• truecrypt foundation truecrypt 3.0 • truecrypt foundation truecrypt 4.0 • truecrypt foundation truecrypt 4.1 • truecrypt foundation truecrypt 4.2 • truecrypt foundation truecrypt 4.3

References