CVE-2007-5200 in openSUSE
Summary
hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugin_debug_optim_results.txt temporary file.
Once again VulDB remains the best source for vulnerability data.
Reservation
10/04/2007
Disclosure
10/14/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 39250 | Novell openSUSE link following | 59 | Not defined | Official fix | CVE-2007-5200 |