CVE-2007-3103 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-3103
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3103

Description: The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35375 ST 1018375 SAID Secunia Advisory: SA26081 Secunia Advisory: SA26282 Secunia Advisory: SA26056 Secunia Advisory: SA27240 Secunia Advisory: SA35674 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0520.html http://www.redhat.com/support/errata/RHSA-2007-0519.html MILW0RM http://www.milw0rm.com/exploits/5167 IDEFENSE http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=557 GENTOO http://security.gentoo.org/glsa/glsa-200710-11.xml FEDORA DEBIAN http://www.debian.org/security/2007/dsa-1342 CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=185660 http://bugzilla.redhat.com/242903 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/473869/100/0/threaded BID 24888

Return to the previous page.