QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-0472

Back to search

CVE-2007-0472

Published: Feb 3, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.

VendorProductVersions

n/a

n/a

affected
n/a

References

23984
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2007:002
vendor-advisory
x_refsource_SUSE
22299
vdb-entry
x_refsource_BID
24111
third-party-advisory
x_refsource_SECUNIA
24469
third-party-advisory
x_refsource_SECUNIA
ADV-2007-0393
vdb-entry
x_refsource_VUPEN
GLSA-200703-09
vendor-advisory
x_refsource_GENTOO
23937
third-party-advisory
x_refsource_SECUNIA
MDKSA-2007:042
vendor-advisory
x_refsource_MANDRIVA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now