Lucene search

K
cve[email protected]CVE-2007-5207
HistoryOct 04, 2007 - 9:17 p.m.

CVE-2007-5207

2007-10-0421:17:00
CWE-59
web.nvd.nist.gov
16
cve-2007-5207
guilt 0.27
local users
symlink attack
security vulnerability

6.5 Medium

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.[PID] temporary file.

CPENameOperatorVersion
debian:guiltdebian guilteq0.27

6.5 Medium

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

Related for CVE-2007-5207