CVE-2007-5718 vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.
MediumCVSS 4.9
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vobcopy | = 0.5.14 | No fix listed |
| debian/vobcopy(Debian:12) | < 1.0.2-1 | 1.0.2-1 |
| debian/vobcopy(Debian:13) | < 1.0.2-1 | 1.0.2-1 |
| debian/vobcopy(Debian:14) | < 1.0.2-1 | 1.0.2-1 |
References
- bugs.debian.org
- 41997 vdb-entry
- 27420 third-party-advisory vendor-advisory
- 29259 third-party-advisory
- GLSA-200803-11 vendor-advisory
- 26233 vdb-entry
- vobcopy-vobcopybla-symlink(38172) vdb-entry
- Debian Security Tracker CVE-2007-5718 vendor-advisory
- bugs.debian.org issue-tracking