CVE-2007-4998
Linux Kernel - Arbitrary File Overwrite via Symlink Attack in cp with Preserve Symlinks Option
Title source: llmDescription
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.
References (3)
Core 3
Core References
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-2023
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=356471
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/43228
Scores
EPSS
0.0035
EPSS Percentile
26.5%
Details
CWE
CWE-59
Status
published
Products (1)
linux/linux_kernel
Published
Jan 31, 2008
Tracked Since
Feb 18, 2026