CVE-2007-3852

The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary code.

Published: 2007-08-14 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2007-3852 is rated Low Risk (29.9/100): CVSS Medium severity, with low exploitation likelihood (EPSS 0.43%). Monitor for updates and reassess as exploit intelligence or EPSS changes.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2007-3852

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 0.14% 0.43% +0.29%
2 2025-06-08 0.16% 0.14% -0.02%
3 2025-03-17 — 0.16% —

Full EPSS history (7 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2007-3852

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
4.4 2.0 MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:L)
Requires local access to the target system.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
 3.4 6.4 [email protected]

Weakness enumeration for CVE-2007-3852

OS Trackers for CVE-2007-3852

vendor priority summary link
debian unimportant CVE-2007-3852 unimportant priority: Debian including 1 source packages (sysstat), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2007-3852
redhat low — https://access.redhat.com/security/cve/CVE-2007-3852
suse medium CVE-2007-3852 severity moderate: SUSE including 15 source package names (sysstat, sysstat-12.4.3-3.2, …), 66 product×package rows across 43 product lines (SUSE CaaS Platform 4.0, SUSE Enterprise Storage 6, … (43 product lines)): Known Not Affected 53, Fixed 13. https://www.suse.com/security/cve/CVE-2007-3852/
ubuntu medium CVE-2007-3852 medium priority: Ubuntu including 1 source packages (sysstat), 4 status rows across 4 suites (dapper, edgy, feisty, upstream): not-affected 3, needs-triage 1. https://ubuntu.com/security/CVE-2007-3852

Vendor comments (NVD) for CVE-2007-3852

  • Red Hat (2008-05-12T00:00:00)

    This issue did not affect the versions of sysstat as shipped with Red Hat Enterprise Linux 2.1, 3, or 4. For Red Hat Enterprise Linux 5, Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=251200 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.

Affected software / configurations for CVE-2007-3852

Vendor Product Version Raw CPE
sysstat sysstat 5.1.2 cpe:2.3:a:sysstat:sysstat:5.1.2:*:*:*:*:*:*:*
sysstat sysstat 5.1.3 cpe:2.3:a:sysstat:sysstat:5.1.3:*:*:*:*:*:*:*
sysstat sysstat 5.1.4 cpe:2.3:a:sysstat:sysstat:5.1.4:*:*:*:*:*:*:*
sysstat sysstat 5.1.5 cpe:2.3:a:sysstat:sysstat:5.1.5:*:*:*:*:*:*:*
sysstat sysstat 6.0.0 cpe:2.3:a:sysstat:sysstat:6.0.0:*:*:*:*:*:*:*
sysstat sysstat 6.0.1 cpe:2.3:a:sysstat:sysstat:6.0.1:*:*:*:*:*:*:*
sysstat sysstat 6.0.2 cpe:2.3:a:sysstat:sysstat:6.0.2:*:*:*:*:*:*:*
sysstat sysstat 6.0.3 cpe:2.3:a:sysstat:sysstat:6.0.3:*:*:*:*:*:*:*
sysstat sysstat 6.0.4 cpe:2.3:a:sysstat:sysstat:6.0.4:*:*:*:*:*:*:*
sysstat sysstat 6.0.5 cpe:2.3:a:sysstat:sysstat:6.0.5:*:*:*:*:*:*:*
sysstat sysstat 7.0.0 cpe:2.3:a:sysstat:sysstat:7.0.0:*:*:*:*:*:*:*
sysstat sysstat 7.0.1 cpe:2.3:a:sysstat:sysstat:7.0.1:*:*:*:*:*:*:*
sysstat sysstat 7.0.2 cpe:2.3:a:sysstat:sysstat:7.0.2:*:*:*:*:*:*:*
sysstat sysstat 7.0.3 cpe:2.3:a:sysstat:sysstat:7.0.3:*:*:*:*:*:*:*
sysstat sysstat 7.0.4 cpe:2.3:a:sysstat:sysstat:7.0.4:*:*:*:*:*:*:*
sysstat sysstat 7.1.1 cpe:2.3:a:sysstat:sysstat:7.1.1:*:*:*:*:*:*:*
sysstat sysstat 7.1.2 cpe:2.3:a:sysstat:sysstat:7.1.2:*:*:*:*:*:*:*
sysstat sysstat 7.1.3 cpe:2.3:a:sysstat:sysstat:7.1.3:*:*:*:*:*:*:*
sysstat sysstat 7.1.4 cpe:2.3:a:sysstat:sysstat:7.1.4:*:*:*:*:*:*:*
sysstat sysstat 7.1.5 cpe:2.3:a:sysstat:sysstat:7.1.5:*:*:*:*:*:*:*
sysstat sysstat 7.1.6 cpe:2.3:a:sysstat:sysstat:7.1.6:*:*:*:*:*:*:*

References for CVE-2007-3852

cvelogic Threat Intelligence