Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

sing can let local users modify files and gain privileges

CVE-2007-6211 · published 18 years ago
Summary

The sing utility on Debian Linux lets a user who runs it locally add data to any file by using its -L (log file) option, which can then give that user higher system rights. This only matters if sing is installed with special permissions, which is not the default. Keep sing installed with normal user rights, apply any vendor updates, and restrict who can run the program.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
sing sing 1.1
cpe:2.3:a:sing:sing:1.1:*:*:*:*:*:*:*
Original advisory text
Send ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. NOTE: this issue is only a vulnerability...
Send ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to override a non-setuid default during installation.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.2 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-264Permissions, Privileges, and Access Controls
Timeline
Published4 Dec 2007
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2007-6211 · NVD
Track software like this
Free during beta