VULNERABILITY INTELLIGENCE

CVE-2007-5718

CVSS score4.9 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2007-10-30
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:C/A:N

Description

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references