CVE-2007-5207

Description

guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.[PID] temporary file.

Affected products

• Debian / guilt0.27 – 0.27

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/36970
• VENDOR_ADVISORYhttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=445308
• MISChttp://osvdb.org/41534
• VENDOR_ADVISORYhttp://secunia.com/advisories/27076
• MISChttp://www.securityfocus.com/bid/25941