CVE-2007-5718

UNKNOWN

vobcopy 0

Published Oct 30, 2007

Modified 1 years ago

Details

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

References

WEB

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448319

WEB

http://osvdb.org/41997

ADVISORY

http://secunia.com/advisories/27420

ADVISORY

http://secunia.com/advisories/29259

ADVISORY

http://security.gentoo.org/glsa/glsa-200803-11.xml

WEB

http://www.securityfocus.com/bid/26233

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/38172

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2007-5718

CVSS Analysis

CVSS v2.0

4.9

Exploitability

Access Vector

LocalAV:L

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

CompleteI:C

Availability

NoneA:N

4.9/AV:L/AC:L/Au:N/C:N/I:C/A:N

Ecosystems

Timeline

PublishedOct 30, 2007

ModifiedAug 7, 2024

CVE-2007-5718 | Mondoo Vulnerability Intelligence