CVE-2007-4998

UNKNOWN

cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination

Published Jan 31, 2008

Modified 1 years ago

Details

cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.

References

WEB

http://osvdb.org/43228

WEB

https://bugzilla.redhat.com/show_bug.cgi?id=356471

WEB

https://issues.rpath.com/browse/RPL-2023

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2007-4998

CVSS Analysis

CVSS v2.0

6.9