CVE-2007-0557

HIGH 7.2CVE-2007-0557 · Published 29/01/2007 · updated 16/06/2026

In short

CVE-2007-0557 is a HIGH (CVSS 7.2) vulnerability affecting rmake (rmake).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
rmake rmake	`= 1.0.3`	No fix yet

Description

rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow attackers to gain privileges via a crafted recipe file, a different vulnerability than CVE-2007-0536.

References

osvdb.org/32971
issues.rpath.com/browse/RPL-1002 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free