CVE-2007-3103: Medium severity Fedoraproject Fedora Core vulnerability

Published Jul 15, 2007

Updated

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.

Affected Software

6 affected components

Fedoraproject Fedora Core=6.0

redhat Linux

redhat Enterprise Linux Desktop=4.0

redhat Enterprise Linux=4.0

Remediation

Patch Available

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=557

Event History

Jul 15, 2007

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3103?

CVE-2007-3103 has a moderate severity level due to its potential for local users to exploit the symlink attack.

How do I fix CVE-2007-3103?

To fix CVE-2007-3103, ensure that the X.Org X11 xfs font server is updated to a version where this vulnerability has been patched.

Who is affected by CVE-2007-3103?

CVE-2007-3103 affects various Linux distributions, including specific versions of Fedora and Red Hat Enterprise Linux.

What is the attack vector for CVE-2007-3103?

The attack vector for CVE-2007-3103 involves local users gaining the ability to change file permissions via a symlink attack on temporary files.

Is CVE-2007-3103 exploitable remotely?

CVE-2007-3103 is not remotely exploitable; it requires local access to the affected systems.