Unscored severity · published Jul 15, 2007
CVE-2007-3103
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the…
–
CVSS
0.9%
EPSS
No
On KEV
Description
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
4.0; 4.0; 4.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
4.0 · source: NVD
FC
Fedora Core · Fedoraproject
6.0 · source: NVD
LI
Linux · Redhat
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3103
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3103
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=185660
bugzilla.redhat.com
http://bugzilla.redhat.com/242903
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=557
osvdb.org
http://osvdb.org/40945
Vendor Advisory
http://secunia.com/advisories/26056
Vendor Advisory
http://secunia.com/advisories/26081
More from Fedora Core
–
CVE-2008-2944
Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core 6 (FC6) allows local users to cause a…
–
CVE-2007-6283
Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as…
–
CVE-2007-1321
Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain…
–
CVE-2007-3847
The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching…
–
CVE-2007-1320
Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow…