Unscored severity · published Nov 26, 2007
CVE-2007-6131
buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files
–
CVSS
0.4%
EPSS
No
On KEV
Description
buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Fedora Core · Redhat
f7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6131
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6131
osvdb.org
http://osvdb.org/42422
secunia.com
http://secunia.com/advisories/27847
securitytracker.com
http://securitytracker.com/id?1019007
www.securityfocus.com
http://www.securityfocus.com/bid/26617
www.vupen.com
http://www.vupen.com/english/advisories/2007/4024
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=383131
More from Fedora Core
5.6
CVE-2005-0109
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to…
–
CVE-2007-2874
Buffer overflow in the wpa_printf function in the debugging code in wpa_supplicant in the Fedora NetworkManager package before 0.6.5-3.fc7 allows user-assisted remote attackers to…
–
CVE-2007-2030
lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked
–
CVE-2007-1352
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the…
–
CVE-2006-6235
A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP…