CVE-2007-5207

Description

guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.[PID] temporary file.

Affected Platforms

Weakness Type

CWE-59

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=445308
• http://osvdb.org/41534
• http://secunia.com/advisories/27076
• http://www.securityfocus.com/bid/25941
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36970
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=445308