Lucene search

K
cve[email protected]CVE-2007-5718
HistoryOct 30, 2007 - 9:46 p.m.

CVE-2007-5718

2007-10-3021:46:00
CWE-59
web.nvd.nist.gov
20
cve-2007-5718
vobcopy
symlink attack
file manipulation

6.4 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

0.0004 Low

EPSS

Percentile

5.2%

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

CPENameOperatorVersion
vobcopy:vobcopyvobcopyeq0.5.14

6.4 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

0.0004 Low

EPSS

Percentile

5.2%