Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2007-6358
HistoryDec 15, 2007 - 1:46 a.m.

CVE-2007-6358

2007-12-1501:46:00
mitre
web.nvd.nist.gov
42
pdftops.pl
security vulnerability
symlink attack
nvd
cve-2007-6358

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

AI Score

5.9

Confidence

Low

EPSS

0

Percentile

5.1%

JSON

pdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary files via a symlink attack on the pdfin.[PID].tmp temporary file, which is created when pdftops reads a PDF file from stdin, such as when pdftops is invoked by CUPS.

Affected configurations

Nvd
Node
glyph_and_cogpdftopsRange≤1.1.19rc1
VendorProductVersionCPE
glyph_and_cogpdftopscpe:/a:glyph_and_cog:pdftops::::

Related

prion 1
nvd 1
debiancve 1
ubuntucve 1
redhatcve 1
cvelist 1
openvas 6
ubuntu 1
nessus 3
debian 1
osv 1
gentoo 1
prion
prion
Code injection
2007-12-15 01:46:00
nvd
nvd
CVE-2007-6358
2007-12-15 01:46:00
debiancve
debiancve
CVE-2007-6358
2007-12-15 01:46:00
ubuntucve
ubuntucve
CVE-2007-6358
2007-12-15 00:00:00
redhatcve
redhatcve
CVE-2007-6358
2015-10-30 10:32:43
cvelist
cvelist
CVE-2007-6358
2007-12-15 01:00:00
openvas
openvas
Ubuntu Update for cupsys vulnerabilities USN-563-1
2009-03-23 00:00:00
Debian: Security Advisory (DSA-1437-1)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-563-1)
2009-03-23 00:00:00
ubuntu
ubuntu
CUPS vulnerabilities
2008-01-09 00:00:00
nessus
nessus
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : cupsys vulnerabilities (USN-563-1)
2008-01-10 00:00:00
Debian DSA-1437-1 : cupsys - several vulnerabilities
2007-12-27 00:00:00
GLSA-200712-14 : CUPS: Multiple vulnerabilities
2007-12-19 00:00:00
debian
debian
[SECURITY] [DSA 1437-1] New cupsys packages fix several vulnerabilities
2007-12-26 13:20:33
osv
osv
cupsys
2007-12-26 00:00:00
gentoo
gentoo
CUPS: Multiple vulnerabilities
2007-12-18 00:00:00

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

AI Score

5.9

Confidence

Low

EPSS

0

Percentile

5.1%

JSON
Related for CVE-2007-6358
prion1nvd1debiancve1ubuntucve1redhatcve1cvelist1openvas6ubuntu1nessus3debian1osv1gentoo1