CVE-2007-1444 netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug.
MediumCVSS 4.4
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netperf | = 2.4.3 | No fix listed |
| debian/netperf(Debian:12) | < 2.4.3-8 | 2.4.3-8 |
| debian/netperf(Debian:12) | = 2.1pl3-1 | No fix listed |
| debian/netperf(Debian:12) | = 2.2pl4-1 | No fix listed |
| debian/netperf(Debian:12) | = 2.3-1 | No fix listed |
| debian/netperf(Debian:12) | = 2.3-3 | No fix listed |
| debian/netperf(Debian:12) | = 2.3-4 | No fix listed |
| debian/netperf(Debian:12) | = 2.4.0-1 | No fix listed |
| debian/netperf(Debian:12) | = 2.4.0-1bpo1 | No fix listed |
| debian/netperf(Debian:12) | = 2.4.0-2 | No fix listed |
| debian/netperf(Debian:12) | = 2.4.1-1 | No fix listed |
| debian/netperf(Debian:12) | = 2.4.2-1 | No fix listed |
| debian/netperf(Debian:12) | = 2.4.3-1 | No fix listed |
| debian/netperf(Debian:12) | = 2.4.3-2 | No fix listed |
| debian/netperf(Debian:12) | = 2.4.3-3 | No fix listed |
| debian/netperf(Debian:12) | = 2.4.3-5 | No fix listed |
| debian/netperf(Debian:12) | = 2.4.3-6 | No fix listed |
| debian/netperf(Debian:12) | = 2.4.3-7 | No fix listed |
| debian/netperf(Debian:13) | < 2.4.3-8 | 2.4.3-8 |
| debian/netperf(Debian:14) | < 2.4.3-8 | 2.4.3-8 |
References
- bugs.debian.org
- 33975 vdb-entry
- 24464 third-party-advisory vendor-advisory
- 22925 vdb-entry
- ADV-2007-0912 vdb-entry
- Debian Security Tracker CVE-2007-1444 vendor-advisory
- bugs.debian.org issue-tracking