VULNERABILITY INTELLIGENCE
CVE-2007-5377
CVSS score6.9 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2007-10-12
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Description
The (1) tramp-make-temp-file and (2) tramp-make-tramp-temp-file functions in Tramp 2.1.10 extension for Emacs, and possibly earlier 2.1.x versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')