Lucene search
MitreCVELIST:CVE-2007-5377HistoryOct 12, 2007 - 12:00 a.m.
CVE-2007-5377
2007-10-1200:00:00
mitre
www.cve.org
4
tramp
emacs
arbitrary files
symlink attack
The (1) tramp-make-temp-file and (2) tramp-make-tramp-temp-file functions in Tramp 2.1.10 extension for Emacs, and possibly earlier 2.1.x versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
References
bugs.gentoo.org/show_bug.cgi?id=194713
lists.gnu.org/archive/html/emacs-devel/2007-10/msg00132.html
lists.gnu.org/archive/html/emacs-devel/2007-10/msg00158.html
osvdb.org/41752
secunia.com/advisories/27244
secunia.com/advisories/27343
www.gentoo.org/security/en/glsa/glsa-200710-22.xml
www.securityfocus.com/bid/26072
Related
ubuntucve
ubuntucve
CVE-2007-5377
2007-10-12 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200710-22 (tramp)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200710-22 (tramp)
2008-09-24 00:00:00
nessus
nessus
GLSA-200710-22 : TRAMP: Insecure temporary file creation
2007-10-25 00:00:00
cve
cve
CVE-2007-5377
2007-10-12 00:17:00
nvd
nvd
CVE-2007-5377
2007-10-12 00:17:00
prion
prion
Code injection
2007-10-12 00:17:00
gentoo
gentoo
TRAMP: Insecure temporary file creation
2007-10-20 00:00:00