Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2007-4462HistoryAug 21, 2007 - 9:17 p.m.
CVE-2007-4462
2007-08-2121:17:00
Debian Security Bug Tracker
security-tracker.debian.org
5
0.0004 Low
EPSS
Percentile
5.2%
lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | po4a | < 0.31-1 | po4a_0.31-1_all.deb |
| Debian | 11 | all | po4a | < 0.31-1 | po4a_0.31-1_all.deb |
| Debian | 10 | all | po4a | < 0.31-1 | po4a_0.31-1_all.deb |
| Debian | 999 | all | po4a | < 0.31-1 | po4a_0.31-1_all.deb |
| Debian | 13 | all | po4a | < 0.31-1 | po4a_0.31-1_all.deb |
Related
prion
prion
Arbitrary file deletion
2007-08-21 21:17:00
ubuntucve
ubuntucve
CVE-2007-4462
2007-08-21 00:00:00
cvelist
cvelist
CVE-2007-4462
2007-08-21 21:00:00
securityvulns
securityvulns
po4a symbolic links problem
2007-09-14 00:00:00
[ GLSA 200709-04 ] po4a: Insecure temporary file creation
2007-09-14 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200709-04 (po4a)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200709-04 (po4a)
2008-09-24 00:00:00
cve
cve
CVE-2007-4462
2007-08-21 21:17:00
gentoo
gentoo
po4a: Insecure temporary file creation
2007-09-13 00:00:00
nessus
nessus
GLSA-200709-04 : po4a: Insecure temporary file creation
2007-09-24 00:00:00