NVD

Id
55257  
Name
CVE-2007-3103  
Description
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-07-15  
Modified Date
2012-10-29  
Seq
2007-3103  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
280809 55257 CVE-2007-3103 http://bugs.gentoo.org/show_bug.cgi?id=185660  View
280810 55257 CVE-2007-3103 http://bugzilla.redhat.com/242903  View
280811 55257 CVE-2007-3103 20070712 Red Hat Enterprise Linux init.d XFS Script chown Race Condition Vulnerability  View
280812 55257 CVE-2007-3103 oval:org.mitre.oval:def:10802  View
280813 55257 CVE-2007-3103 GLSA-200710-11  View
280814 55257 CVE-2007-3103 DSA-1342  View
280815 55257 CVE-2007-3103 5167  View
280816 55257 CVE-2007-3103 RHSA-2007:0519  View
280817 55257 CVE-2007-3103 RHSA-2007:0520  View
280818 55257 CVE-2007-3103 20070717 rPSA-2007-0141-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs  View
280819 55257 CVE-2007-3103 24888  View
280820 55257 CVE-2007-3103 1018375  View
280821 55257 CVE-2007-3103 redhat-xfs-privilege-escalation(35375)  View
280822 55257 CVE-2007-3103 https://issues.rpath.com/browse/RPL-1485  View
280823 55257 CVE-2007-3103 FEDORA-2009-3666  View
280824 55257 CVE-2007-3103 FEDORA-2009-3651  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51848 JVNDB-2007-000511 X.Org X11 xfs font server におけるシンボリックリンク攻撃の脆弱性 Red Hat Enterprise Linux ベースの Linux ディストリビューションにおける、X.Org X11 xfs font server を起動する init.d スクリプトには、/tmp/.font-unix 一時ファイルのシンボリック攻撃を利用して、任意のファイルの権限を不正に書き換えられる脆弱性が存在します。 CVE-2007-3103 26458 CVE-2007-3103 55257 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000511.html 2007-07-12 2007-07-20 View