CVE-2007-5207: Low severity Debian Guilt vulnerability
Published Oct 4, 2007
·Updated
guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.[PID] temporary file.
Affected Software
1 affected component
Debian Guilt=0.27
Event History
Oct 4, 2007
CVE Published
09:17 PM
Oct 5, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-5207?
CVE-2007-5207 is classified as a medium-severity vulnerability due to its potential for local file overwriting.
2
How do I fix CVE-2007-5207?
To fix CVE-2007-5207, it is recommended to upgrade to a version of guilt that is not vulnerable to the symlink attack.
3
Who is affected by CVE-2007-5207?
CVE-2007-5207 affects local users of guilt version 0.27 on Debian systems.
4
What is a symlink attack in relation to CVE-2007-5207?
A symlink attack in CVE-2007-5207 involves creating a symbolic link that allows an attacker to overwrite arbitrary files.
5
Are there any workarounds for CVE-2007-5207?
The primary workaround for CVE-2007-5207 is to avoid using the guilt tool until a patch is applied.