CVE-2007-3036 : Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and

Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files."

Published 2007-09-12 01:17:00

Updated 2018-10-12 21:43:53

Source Microsoft Corporation

View at NVD, CVE.org

Products affected by CVE-2007-3036

Microsoft » Windows 2003 Server » Update SP2
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Windows 2003 Server » Update SP2 X64 Edition
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*
Matching versions
Microsoft » Windows 2003 Server » Update Gold X64 Edition
cpe:2.3:o:microsoft:windows_2003_server:*:gold:x64:*:*:*:*:*
Matching versions
Microsoft » Windows 2003 Server » Update SP1
cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Windows Vista » Update Gold
cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*
Matching versions
Microsoft » Windows Vista » Update Gold X64 Edition
cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*
Matching versions
Microsoft » Windows Services For Unix » Version: 3.5
cpe:2.3:a:microsoft:windows_services_for_unix:3.5:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2000 » Update SP4
When used together with: Microsoft » Windows 2003 Server » Update SP1
When used together with: Microsoft » Windows 2003 Server » Update SP2
When used together with: Microsoft » Windows Xp » Update SP2
Microsoft » Windows Services For Unix » Version: 3.0
cpe:2.3:a:microsoft:windows_services_for_unix:3.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2000 » Update SP4
When used together with: Microsoft » Windows 2003 Server » Update SP1
When used together with: Microsoft » Windows 2003 Server » Update SP2
When used together with: Microsoft » Windows Xp » Update SP2

Exploit prediction scoring system (EPSS) score for CVE-2007-3036

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-3036

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C	3.4	10.0	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2007-3036

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-3036

Jump to

Vulnerability Details : CVE-2007-3036

Products affected by CVE-2007-3036

Exploit prediction scoring system (EPSS) score for CVE-2007-3036

CVSS scores for CVE-2007-3036

CWE ids for CVE-2007-3036

References for CVE-2007-3036