Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 21/08/2007 Updated: 05/09/2008

CVSS v2 Base Score: 3.3 | Impact Score: 4.9 | Exploitability Score: 3.4

VMScore: 294

Vector: AV:L/AC:M/Au:N/C:N/I:P/A:P

lib/Locale/Po4a/Po.pm in po4a prior to 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
po4a po4a

Debian Bug report logs - #439226 CVE-2007-4462: arbitrary files overwriting Package: po4a; Maintainer for po4a is Martin Quinson <mquinson@debianorg>; Source for po4a is src:po4a (PTS, buildd, popcon) Reported by: Thijs Kinkhorst <thijs@debianorg> Date: Thu, 23 Aug 2007 12:30:01 UTC Severity: serious Tags: securit ...

NVD-CWE-Other http://bugs.gentoo.org/show_bug.cgi?id=189440 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=253541 http://alioth.debian.org/frs/shownotes.php?release_id=1019 http://security.gentoo.org/glsa/glsa-200709-04.xml http://www.securityfocus.com/bid/25402 http://secunia.com/advisories/26492 http://secunia.com/advisories/26810 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439226 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-4462

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect