CVE-2007-3103

Published: Jul 15, 2007Modified: Apr 23, 2026

6.2

Vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 1.9 / Impact: 10.0

Source: NVD

Description

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.

Affected (6)

Products: Fedoraproject: Fedora Core · Redhat: Enterprise Linux, Enterprise Linux Desktop, Linux

1 product

3 products

Enterprise Linux

Enterprise Linux Desktop

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora Core	Version 6.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux Desktop	Version 4.0
Redhat Linux	All versions

Related CWEs

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (44)

http://bugs.gentoo.org/show_bug.cgi?id=185660

Source: secalert@redhat.com

http://bugzilla.redhat.com/242903

Source: secalert@redhat.com

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=557

Source: secalert@redhat.com

Patch

http://osvdb.org/40945

Source: secalert@redhat.com

http://secunia.com/advisories/26056

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26081

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26282

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27240

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/35674

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200710-11.xml

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1342

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0519.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0520.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/473869/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/24888

Source: secalert@redhat.com

http://www.securitytracker.com/id?1018375

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/35375

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1485

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10802

Source: secalert@redhat.com

https://www.exploit-db.com/exploits/5167

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00095.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00096.html

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=185660

Source: af854a3a-2127-422b-91ae-364da2661108

http://bugzilla.redhat.com/242903

Source: af854a3a-2127-422b-91ae-364da2661108

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=557

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://osvdb.org/40945

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26056

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/26081

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/26282

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/27240

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35674

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200710-11.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1342

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-0519.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-0520.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/473869/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/24888

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018375

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/35375

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-1485

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10802

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/5167

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00095.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00096.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.