CVE-2007-3036
Last modified
CVE-2007-3036 is a vulnerability of currently unknown severity. Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files.". EPSS estimates a 2.40% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Windows Services For Unix | 3.5 | — |
| Microsoft | Windows Services For Unix | 3.0 | — |
| Microsoft | Windows 2003 Server | All versions | Gold |
| Microsoft | Windows Vista | All versions | Gold |
References
- http://secunia.com/advisories/26757Vendor Advisory
- http://www.kb.cert.org/vuls/id/768440US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA07-254A.htmlUS Government Resource
- http://secunia.com/advisories/26757Vendor Advisory
- http://www.kb.cert.org/vuls/id/768440US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA07-254A.htmlUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-3036?
How severe is CVE-2007-3036?
How do I fix CVE-2007-3036?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-3030Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewe…
- CVE-2007-3031Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2007-3032Unspecified vulnerability in Windows Vista Contacts Gadget i…
- CVE-2007-3033Cross-site scripting (XSS) vulnerability in Windows Vista Fe…
- CVE-2007-3034Integer overflow in the AttemptWrite function in Graphics Re…
- CVE-2007-3035Unspecified vulnerability in Microsoft Windows Media Player …
- CVE-2007-3037Microsoft Windows Media Player 7.1, 9, 10, and 11 allows rem…
- CVE-2007-3038The Teredo interface in Microsoft Windows Vista and Vista x6…
- CVE-2007-3039Stack-based buffer overflow in the Microsoft Message Queuing…
- CVE-2007-3040Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Mi…
- CVE-2007-3041Unspecified vulnerability in the pdwizard.ocx ActiveX object…
- CVE-2007-3042Cross-site scripting (XSS) vulnerability in Meneame before 2…
Are you affected by CVE-2007-3036?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
