|
|
CVE Reference: CVE-2007-4631 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-4631 |
|
|
Description: The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other versions up to 2pre1 allows local users to overwrite arbtirary files and execute arbitrary code via a symlink attack on temporary files with predictable filenames. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/36503 SAID Secunia Advisory: SA26745 Secunia Advisory: SA26738 Secunia Advisory: SA27098 MISC GENTOO http://security.gentoo.org/glsa/glsa-200710-05.xml FEDORA http://fedoranews.org/updates/FEDORA-2007-210.shtml CONFIRM http://sourceforge.net/project/shownotes.php?release_id=538002&group_id=139897 http://sourceforge.net/project/shownotes.php?release_id=538002 http://bugs.gentoo.org/show_bug.cgi?id=190697 BID 25618 |
|
| Return to the previous page. |
