CVE-2007-5200: Low severity openSUSE openSUSE vulnerability
Hugin was reported to create temporary / debug files in unsafe manner. During the optimizer run, it creates debug output file with pre-defined name: /tmp/hugindebugoptimresults.txt . If file was already created by other user, hugin gives an error message.
This problem can be abused by malicious local user to perform symlink attack against user running hugin, which will result in overwrite of arbitrary file writable by user running hugin with panorama optimizer output.
There does not seem to be any upstream patch at the moment. Updated package was released for openSuSE, which resolves this problem by disabling creation of debug file.
Other sources
hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugindebugoptimresults.txt temporary file.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5200?
CVE-2007-5200 is considered to be of medium severity due to the potential for local users to manipulate files.
How do I fix CVE-2007-5200?
To fix CVE-2007-5200, users should upgrade to the patched version of hugin available for their operating system.
What systems are affected by CVE-2007-5200?
CVE-2007-5200 affects hugin versions in SUSE openSUSE 10.2 and 10.3 as well as specific versions used in Red Hat distributions.
What type of attack is associated with CVE-2007-5200?
CVE-2007-5200 is associated with a symlink attack that allows local users to overwrite arbitrary files.
Are there any workarounds for CVE-2007-5200?
A temporary workaround for CVE-2007-5200 is to restrict local user access or set proper file permissions for sensitive files.