CVE-2007-3919

EPSS 0.04%
Published 28.10.2007 17:08:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm.

Affected products Warnungen 0 Metrics 2 CWE 1 References 21

Data is provided by the National Vulnerability Database (NVD)

Xensource Inc ≫ Xen Version3.0.3_0_1

   Debian ≫ Debian Linux Version4.0 Editionalpha
   Debian ≫ Debian Linux Version4.0 Editionamd64
   Debian ≫ Debian Linux Version4.0 Editionarm
   Debian ≫ Debian Linux Version4.0 Editionhppa
   Debian ≫ Debian Linux Version4.0 Editionia-32
   Debian ≫ Debian Linux Version4.0 Editionia-64
   Debian ≫ Debian Linux Version4.0 Editionm68k
   Debian ≫ Debian Linux Version4.0 Editionmips
   Debian ≫ Debian Linux Version4.0 Editionmipsel
   Debian ≫ Debian Linux Version4.0 Editionpowerpc
   Debian ≫ Debian Linux Version4.0 Editions390
   Debian ≫ Debian Linux Version4.0 Editionsparc

Xensource Inc ≫ Xen Version3.0.3_0_3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.04%	0.079

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6	2.7	9.2	AV:L/AC:M/Au:S/C:N/I:C/A:C

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

http://secunia.com/advisories/27486

http://www.mandriva.com/security/advisories?name=MDKSA-2007:203

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00004.html

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=447795

http://osvdb.org/41342

http://osvdb.org/41343

http://secunia.com/advisories/27389

Vendor Advisory

http://secunia.com/advisories/27408

Vendor Advisory

http://secunia.com/advisories/27497

Vendor Advisory