NVD

Id
52696  
Name
CVE-2007-0472  
Description
Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K"s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn"t properly handled by the writeFile function in core/smb4kfileio.cpp.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-02-03  
Modified Date
2011-03-07  
Seq
2007-0472  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266339 52696 CVE-2007-0472 http://developer.berlios.de/bugs/?func=detailbug&bug_id=9630&group_id=769  View
266340 52696 CVE-2007-0472 http://developer.berlios.de/project/shownotes.php?release_id=11706  View
266341 52696 CVE-2007-0472 http://developer.berlios.de/project/shownotes.php?release_id=11902  View
266342 52696 CVE-2007-0472 http://developer.berlios.de/project/shownotes.php?release_id=9777  View
266343 52696 CVE-2007-0472 SUSE-SR:2007:002  View
266344 52696 CVE-2007-0472 GLSA-200703-09  View
266345 52696 CVE-2007-0472 MDKSA-2007:042  View
266346 52696 CVE-2007-0472 22299  View
266347 52696 CVE-2007-0472 ADV-2007-0393  View
266348 52696 CVE-2007-0472 [smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56296 JVNDB-2007-004988 Smb4K における任意のファイルを変更される脆弱性 Smb4K は、競合状態により、以下の影響を受ける脆弱性が存在します。 CVE-2007-0472 23827 CVE-2007-0472 52696 3.7 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004988.html 2007-02-03 2012-12-20 View