CVE-2007-4631 The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other versions up to 2pre1 allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on tempo...
MediumCVSS 6.9
EPSS 0.45%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other versions up to 2pre1 allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on temporary files with predictable filenames.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qgit | = 1.5.6_2pre1 | No fix listed |
| debian/qgit(Debian:12) | < 1.5.5-1.1 | 1.5.5-1.1 |
| debian/qgit(Debian:13) | < 1.5.5-1.1 | 1.5.5-1.1 |
| debian/qgit(Debian:14) | < 1.5.5-1.1 | 1.5.5-1.1 |
References
- bugs.gentoo.org patch
- FEDORA-2007-2108 vendor-advisory
- 26738 third-party-advisory vendor-advisory
- 26745 third-party-advisory vendor-advisory
- 27098 third-party-advisory vendor-advisory
- GLSA-200710-05 vendor-advisory
- sourceforge.net patch
- sourceforge.net patch
- 25618 patch vdb-entry
- ADV-2007-3107 vdb-entry vendor-advisory
- bugzilla.redhat.com
- qgit-dataloader-symlink(36503) vdb-entry
- Debian Security Tracker CVE-2007-4631 vendor-advisory
- bugs.debian.org issue-tracking