Lucene search
Ubuntu.comUB:CVE-2007-4631HistoryAug 31, 2007 - 12:00 a.m.
CVE-2007-4631
2007-08-3100:00:00
ubuntu.com
ubuntu.com
6
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other
versions up to 2pre1 allows local users to overwrite arbitrary files and
execute arbitrary code via a symlink attack on temporary files with
predictable filenames.
Related
prion
prion
Code injection
2007-08-31 22:17:00
nessus
nessus
GLSA-200710-05 : QGit: Insecure temporary file creation
2007-10-09 00:00:00
Fedora 7 : qgit-1.5.7-1.fc7 (2007-2108)
2007-11-06 00:00:00
securityvulns
securityvulns
[ GLSA 200710-05 ] QGit: Insecure temporary file creation
2007-10-08 00:00:00
QGit git repository graphical interface symbolic links
2007-10-08 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200710-05 (qgit)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200710-05 (qgit)
2008-09-24 00:00:00
Fedora Update for qgit FEDORA-2007-2108
2009-02-27 00:00:00
debiancve
debiancve
CVE-2007-4631
2007-08-31 22:17:00
fedora
fedora
[SECURITY] Fedora 7 Update: qgit-1.5.7-1.fc7
2007-09-10 16:54:48
gentoo
gentoo
QGit: Insecure temporary file creation
2007-10-07 00:00:00
cve
cve
CVE-2007-4631
2007-08-31 22:17:00
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for UB:CVE-2007-4631