CVE-2007-1500 The Linux Security Auditing Tool (LSAT) allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using /tmp/lsat1.lsat.
MediumCVSS 4.3
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Linux Security Auditing Tool (LSAT) allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using /tmp/lsat1.lsat.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gentoo linux | All versions | No fix listed |
References
- bugs.gentoo.org
- 34267 vdb-entry
- 24526 third-party-advisory vendor-advisory
- GLSA-200703-20 vendor-advisory
- 23014 vdb-entry
- gentoo-lsat-symlink(33057) vdb-entry