Unrated severityNVD Advisory· Published Oct 1, 2007· Updated Jun 16, 2026

CVE-2007-5159

Description

The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permissions (setuid root) to mount.ntfs-3g, which allows local users with fuse group membership to read from and write to arbitrary block devices, possibly involving a file descriptor leak.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tuxera/Ntfs 3g
cpe:2.3:a:ntfs-3g:ntfs-3g:*:*:*:*:*:*:*:*
Range: <=1.913-1.fc7
Fedorahosted/ntfs-3gllm-create
Range: <1.913-2.fc7
Ubuntu/ntfs-3gllm-create

Patches

Vulnerability mechanics

References

secunia.com/advisories/26938nvdVendor Advisory
bugzilla.redhat.com/show_bug.cginvd
www.redhat.com/archives/fedora-desktop-list/2007-September/msg00163.htmlnvd
www.redhat.com/archives/fedora-package-announce/2007-September/msg00368.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000