CVE-2007-5718

EPSS 0.03%
Veröffentlicht 30.10.2007 21:46:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Vobcopy ≫ Vobcopy Version0.5.14

   Debian ≫ Debian Linux Version3.1
   Debian ≫ Debian Linux Version3.1 Editionalpha
   Debian ≫ Debian Linux Version3.1 Editionamd64
   Debian ≫ Debian Linux Version3.1 Editionarm
   Debian ≫ Debian Linux Version3.1 Editionhppa
   Debian ≫ Debian Linux Version3.1 Editionia-32
   Debian ≫ Debian Linux Version3.1 Editionia-64
   Debian ≫ Debian Linux Version3.1 Editionm68k
   Debian ≫ Debian Linux Version3.1 Editionmips
   Debian ≫ Debian Linux Version3.1 Editionmipsel
   Debian ≫ Debian Linux Version3.1 Editionppc
   Debian ≫ Debian Linux Version3.1 Editions-390
   Debian ≫ Debian Linux Version3.1 Editionsparc
   Debian ≫ Debian Linux Version3.1 Updater1
   Debian ≫ Debian Linux Version3.2.4
   Debian ≫ Debian Linux Version4.0
   Debian ≫ Debian Linux Version4.0 Editionalpha
   Debian ≫ Debian Linux Version4.0 Editionamd64
   Debian ≫ Debian Linux Version4.0 Editionarm
   Debian ≫ Debian Linux Version4.0 Editionhppa
   Debian ≫ Debian Linux Version4.0 Editionia-32
   Debian ≫ Debian Linux Version4.0 Editionia-64
   Debian ≫ Debian Linux Version4.0 Editionm68k
   Debian ≫ Debian Linux Version4.0 Editionmips
   Debian ≫ Debian Linux Version4.0 Editionmipsel
   Debian ≫ Debian Linux Version4.0 Editionpowerpc
   Debian ≫ Debian Linux Version4.0 Editions-390
   Debian ≫ Debian Linux Version4.0 Editionsparc

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.03%	0.061

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.9	3.9	6.9	AV:L/AC:L/Au:N/C:N/I:C/A:N

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448319

http://osvdb.org/41997

http://secunia.com/advisories/27420

Vendor Advisory

http://secunia.com/advisories/29259

http://security.gentoo.org/glsa/glsa-200803-11.xml

http://www.securityfocus.com/bid/26233

https://exchange.xforce.ibmcloud.com/vulnerabilities/38172

https://nvd.nist.gov/vuln/detail/CVE-2007-5718

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-5718

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-5718

EUVD