CVE-2007-5718

vobcopy 0.5.14 - Arbitrary File Write via Symlink Attack on Temporary Files

Title source: llm
STIX 2.1

Description

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

References (7)

Core 7
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200803-11.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29259
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26233
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/41997
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27420
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38172

Scores

EPSS 0.0035
EPSS Percentile 26.8%

Details

CWE
CWE-59
Status published
Products (1)
vobcopy/vobcopy 0.5.14
Published Oct 30, 2007
Tracked Since Feb 18, 2026